refactor: update encryption flow