Client: handle batch-encrypted commands