Only transfer operations (so normal transfer and also transfer to/from savings and recurrent transfer), what you mean by de/encryption a comment? In clive we support operations with active key (with few exceptions like custom_json). By the way decryption requires you to just pass ciphertext as cli argument - it doesnt need to be included in transfer.