Make configserver do encryption by default
Fix SSO so it can push config into resource server