@terracatta I maybe have a fix. While looking at disk encryption previously on macOS, I had figured out a way to query using plain old IOKit key for APFS too (just like HFS+) instead of pulling in DiskManagement (private) framework. If I can dig up my notes, I can give it a shot over the weekend.