lbs-util now supports reading encrypted segments (with lbs-filter-gpg).