The OpenAFS for Windows installer by default activates a weak form of encrypted data transfer between the AFS client and the AFS servers.  This is often referred to as "fcrypt" mode.  Encrypted data transfer can be turned on or off with the "fs crypt" command.  Transitions between "crypt" and "non-crypt" modes are logged to the Windows Application Event Log.