If enabled, the service encrypts the name identifier in a SessionContextStatement. By default, this function is not enabled.