encrypt: more paranoia in FetchStreaming

Change-Id: Ie072a56015eb8a921328eccc6684647d2a153df3