This is currently public because it is called at agent start in `command/agent/command.go` in order to display `Encrypted: <true/false>`.