decrypt before configuring