Iam using pand version 2.17 and establishing pan connection between 2 bluetooth devices.

I find that even though I enable both authentication and encryption on one side and only authentication on the other side(thru hciconfig), still the connection gets established and iam able to transfer files thru this connection and read them on the other side....My doubt is how does connection is created even if encryption is disabled on the other side....