Issue #3312553 by ptmkenny, alexpott: Document how to limit encryption/decryption to specific entity bundles