Use aes-256-gcm rather than aes-128-cbc