defaultEncryptionScope