encrypt keys
add encryption key
remove cerificate