Seems to me that the only way to reasonably apply "innocent until proven guilty" there is to only convict if they know what the encrypted contents are, and if they can already prove that beyond a reasonable doubt, why do they even need you to decrypt them for you? Conversely, if they don't know the contents, then they may well be innocent, and the password innocently forgotten.