Layer 2 encryption