they have had encrypted firmware for a long time already, see the missing clock management in nouveau.