Encrypting system properties in a cluster

I’m seeing an issue with the encryption of system properties via the admin console (using the “+” button); it doesn’t work well in a (hazelcast) clustered environment.

if you encrypt a property, the fact that it is encrypted is recorded in conf/security.xml - but only on the node that was accessed via the UI. Other nodes will see the encrypted value in the database, but not know it’s encrypted because their local security.xml has not been updated.

Is this expected behaviour, or should the encryption marker be recorded against all nodes automatically in some manner?