prefer encryption on metadata download