• i logged in on the same account that the sql agent service runs under, changed security of the package to

    "encrypt sensitive with userkey"

    sis package now runs fine!