fix pts mem vulnerability, with new -encrypt option