Sub-user cannot decrypt encrypted submissions