I can see that the xtrabackup-v2 SST script has an encrypt=4 option:
The mariabackup SST script does not appear to have this option:
Percona describes this option as:
Set encrypt=4 for SST encryption with SSL files generated by MySQL. This is the recommended mode.
Considering that you have all three necessary files: