pub const KU_ENCIPHER_ONLY: i32 = 1;