SSE-C key is visible in pbm.json metadata file and encryption is not happening

I have enabled pbm with GCS bucket and SSE-C encryption, but the key is visible in the pbm.json file.
Also the encryption seems not happening, as the file is downloadable and visible on click from GCS console.
Does the SSE-C encryption enabled for GCS buckets?