Guardrails for encryption

Find and fix misconfigured encryption in realtime.