encrypting resources during update