What I did to solve this was enable my user to sudo without a password for rsync, and then sudo rsync in.
rsync -vhazP --rsync-path=‘sudo rsync’ BOX.DOMAIN.COM:/home/user-data/backup/encrypted /Users/my/backup/location/
What I did to solve this was enable my user to sudo without a password for rsync, and then sudo rsync in.
rsync -vhazP --rsync-path=‘sudo rsync’ BOX.DOMAIN.COM:/home/user-data/backup/encrypted /Users/my/backup/location/