Add external encryption with key-manager and engine