Lost in translation: encryption, key management, and real security