encrypt all log entries by default