encryptionID should be part of the signed Options