dcp_inspect: And actually report plaintext/KDM required