Thanks, but I'm not restoring via the encrypted remote, but directly from the aws glacier. To get the correct name run the
rclone cryptdecode glacier-encrypted: memes/cat.png --reverse
on the encrypted remote and use that path to restore it from glacier: . Used it with aws cli and it worked fine.