The recipient is often not us, so we don't have the ability to troubleshoot the other end. It's almost always the case that OWA and Microsoft Mail can decrypt the message, but the full Outlook client can't. For many of our partners OWA and Microsoft Mail is not allowed. I want to embrace OME but the recipient behavior is wildly inconsistent making it difficult for users to adopt.