End-to-End Institutional Encryption