Add start encryption/decryption API for internal storage