this should get encrypted once -e is run