Dropped encryption ack control message can result in connection failure

When connecting a client using encryption, the server's NetConnection sends the encryption ack and then immediately enables encryption (UNetConnection::EnableEncryptionServer). In the case where the encryption ack is dropped and needs to be resent, this seems to result in the resent encryption ack being encrypted, as the client, which only enables encryption after receiving and processing this ack, never receives/processes it. The logs from the client show it ignoring all messages from the server with the following message:
"PacketHandlerLog: FAESGCMHandlerComponent::Incoming: received encrypted packet before key was set, ignoring."

Enable encryption for a project (such as in ShooterGame with ShooterGame.TestEncryption or in Lyra with Lyra.TestEncryption), and set an encryption packet handler.
During connection process, if the initial NMT_EncryptionAck control channel message sent from the server is dropped, the client will be unable to connect.