sa_can_encrypt