Based on the existing documentation found only on Fusion.
To start encrypted virtual machines, use the nogui flag. The vmrun utility does not support GUI mode with encrypted virtual machines.
My customer would like to start encrypted VMs from the vmrun command with GUI enabled therefore enabling the user for certain tasks when starting the encrypted VM.
Currently they can launch the VM with the nogui flag but this prohibits the tasks that they deem are allowed for the end user.