Which combination is valid for a running Extensible Network Controller instance?

Which combination is valid for a running Extensible Network Controller instance?

A.
OpenFlow unencrypted, onePK encrypted

B.
OpenFlow encrypted, onePK unencrypted

C.
OpenFlow encrypted, onePK encrypted

D.
OpenFlow unencrypted, onePK unencrypted