Encrypted partial bitstreams are supported by the PRC for UltraScale devices only.
For 7 series, only unencrypted partial bitstreams can be delivered by the PRC.
A custom controller would be needed to deliver encrypted partial bitstreams; the configuration engine itself supports this capability.
The PRC supports all other bitstream options, such as compression, per-frame CRC, and blanking bitstreams.
Support in the PRC for encrypted partial bitstreams for 7 series is planned for a future Vivado release.