How to Embrace Advanced Encryption Without Introducing Risk