Add a new method to setup encryption. split pems to do something interesting. part2 bugfix1