Metadata encryption was disabled in 571b1daaf55ce69cc6849f9d1951f238441a87b6 because we have yet to automate CI to be able to allow access to the keychain when the process runs. We can't use our existing approach of security unlock <keychain name> before running the job because that keychain doesn't exist until the job runs.