param: turn 'cups encrypt' into a generated function