if you've changed the encryption and disable it after you deployed the first version, the cluster Operator didn't catch that up and the server config file will have encryption still enabled