make backup encryption optional