The CopyToLocal inside the client package downloads the encrypted file if the file is placed in the encrypted zone. I don't find any option available to get the decrypted content of the file. Whereas when I use the Hadoop CLI or WebHDFS API, it copies the decrypted file for me.