# attr_encrypted uses per-model :key option (see YoutubeCredential, StreamSession)