[DCP-o-matic] Encryption & KDMs generation