After encrypting a file using sops -e, the resulting yaml file was indented using tabs. This is disallowed by the spec and does not pass yaml linters. After manually converting the tabs to spaces sops -d continues to work, so this is mostly an inconvenience.