HLS AES-128 encryption does not work on transcoded streams

I have AES-128 encryption working for all streams except real-time transcoded streams. I have a .key file of the transcoded stream name in the keys directory and it doesn’t seem to take.

In this case, the transcoded stream has a _aac suffix attached to it. When I access the playlist.m3u8 file for that transcoded stream, it’s never being encrypted.

Is this a known limitation?

I’ve noticed that I have to restart the wowza service in order for the key file for the transcoded stream to be recognized and for the stream to become encrypted. Is this a bug?

Also, what is the “st” directory in the /keys directory? There is a .key file in there that gets updated on service restart.