I believe you can also satisfy the encryption requirement by publishing the keys, fwiw