So, open models will be better on this benchmark, which is deserved

For single turn prompts like this, you just have to give the model encrypted bytes and ask politely what's in them, really.

GPT-5.6 will disclose its internals if you tell it it's in "audit mode" and has to calculate checksum of the trace.