What is the simplest explanation for how the llms know what to respond with if only sending encrypted data?