Security on Dedup over OST

Does BE add any security layer or manipulate deduplicated data with any proprietary Symantec technology? We have a Dell dedup device that hashes the data in such a way that it should protect data fairly well, but the device doesn't actually use any encryption. They expect to add encryption in 2015, but backups to the device can't use the BE encryption because that interferes with the dedup process.

Does BE do anything during deduplication that basically requires BE to refresh the data (besides the backup user account)?

Thanks.