Tagged end-to-end-encryption