how does this work from a security standpoint? per user encryption?