only one encryption key lookup in most cases instead of three
(has_key, get_key_size, get_key).