You must use the SecureSecondaries parameter with a value of TransferToSecureServers to specify secure secondary servers ...