Bring back the NULL encryption type for dests, as
trying to reuse type 0 has injected too many bugs.
By using NULL it is much easier to write safe code.