protocol: add marker bytes for encrypted blobs