In case anyone else is having issues using TWRP with CM 13 encryption, the issue is already fixed in TWRP code, they just haven’t released a new build. So I’ve done my own build off nightly sources.
Hopefully this will help out anyone else who can’t get TWRP 3.0.2 to access encrypted /data .