Encrypting that entire process doesn't strike me as excessive, I kinda assumed that was already how it's done anyway.