They can apply for an approved key if they need to, that way that key can be revoked if they misbehave. I know it sounds drastic but imagine the kind of person

They can apply for an approved key if they need to, that way that key can be revoked if they misbehave. I know it sounds drastic but imagine the kind of person who would try to prevent encryption in the first place. We should expect drastic steps from them.