basic server-side encryption support