When creating packages, the default security protection level is set as EncryptSensitiveWithUserKey. The user key mentioned is created off of the login of the user who created the project. If a developer other than the one who originally created the project or package opens it, they will receive the following warnings: