space contractors must use only "approved" encryption devices?