create/read/write encryption works