update faq about client-side encryption