When an encrypted field is newly introduced in a tracker, as long as the artifact has not been updated getChangesetValue returns null which leads to the field being missing in some API responses for instance. The default value should be the same than for String field, namely an empty string.