S3 encryption metadata missing in bulk export

Is there a clean way to preserve kms encryption context when exporting recordings via the bulk api? we are seeing aws_s3_object_encryption_context as null in the manifest json. this breaks our chain of custody validation scripts. using python sdk 2.14 against london region. the s3 bucket policy requires server-side encryption with aws kms. any ideas on forcing the metadata through?