change all internal encryption back to cbc mode; add hidden command to convert from gcm to cbc internally