common/encrypt: support requiring other encryption settings