While working on T8177, I found out we only deal with OpenPGP encryption, but silently skip/copy any SMIME encryption. That may at least come as a surprise. At a minimum, this should be logged, explicitly, but it may also be worth making it work, in the first place.