The PKCS8 changes updated the encryption on the keys so that the `x509.IsEncryptedPEMBlock` may no longer return true because it cannot parse the PEM block. The `keyutils` module in SwarmKit can tell whether it is encrypted either way. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> Upstream-commit: ed7d7b9b0577895e8305e87816cb52fc4e2a0b92 Component: engine