It is not only the double layer of encryption, but also a change in the key derivation function of the symmetric encryption between Checkmk Agent 2.2 and 2.3 that eats up much CPU time. See this forum thread: