do we have to encrypt all pages? or just pages that handle sensitive information?