Returns a mask that determines whether the data should be stored in an encrypted form.
Data will be stored in encrypted form by default.