The testing we did must have been done on a different version then. With BLUS30732 all 22 (not 21) .sprx elfs decrypt without any complain from scetool.
Do you remember which specific .sprx failed on your try?
Do you have a link to Ifcaro explanation?
Thanks for the answer.