* fix(replication): fail closed on destination encryption * test(replication): avoid Debug bound in encryption assertion