Tag client-side encryption