Account policies will determine when messages are to be signed or encrypted automatically.
The All Accounts setting will be applied to all accounts by default.
You can manually change the settings for individual accounts and aliases below.
If you do not have a certificate/key corresponding to an email address/alias the settings will not be available and a message "No matching certificate/key found for this account" will be displayed instead.