encrypt files on update