Jackson implementation doesn't encrypt fields that are to be encrypted by default

[jorabin]

If you add an entry then save it, the protectOnSave attribute is not set on protected field so it's not encrypted.