enable encryption by default