Two views on encryption policy