Set encrypted to None to workaround EC2 API weirdness.