6.8.3. Encryption policies