Storage layer is plaintext, we want to setup an encryption key in the PSM. So the contents of the account state and deltas are stored encrypted and decrypted in transit
in private mode: the enclave holds the encryption keys for operating over contents in-transit