When preparing for a migration using RMAN DUPLICATE from an active database, which two actions do you need to take if the on-premises database (DB) is Transparent Data Encryption (TDE) encrypted?