media: send 'encryption' SDP attribute based on policy