encryption is out of scope