pub fn default_encryption() -> Option<String>