Exactly, who trusts server side encryption anyway?