before it was done as computed properties of model accessing encryption key in serializer is done via global application var. this should be removed in long-term