Putting the sendback outside the encrypted part of the response.

It's more useful this way.
Some work done on the client part.