Despite purporting to support it in the way that the edit and yaml encryption/decryption modes work, we do no decrypt the keys of hashes here.
Suggestion: strip out the functionality from the test suite and don't support it until someone actually asks for it to work and comes up with a solid use case that can't be achieved any other way.