`cfs` should have optional encryption.
cfsshould have optional encryption.