So the way to detect encrypted hb is to see if the type field is not request or response? We know when the encryption starts, shouldn't we use to info as well?