fix key handling
use encrypted transport by default
don't hard-code a block size
update docs