I imagine you'd do it in exactly the same way as when things aren't encrypted - with good quality investigation, surveillance and informants.