Tag end-to-end encryption