Only set CMS parameter when encrypting