record now, decrypt later?