> If government can demand the keys, they can take them and decrypt it.

The question isn't how its decrypted, the question is how to determine WHICH traffic to decrypt in order to inspect it.