If selected, the service will encrypt the name identifier in a SessionContextStatement. By default, the option is not selected.