How to decrypt IRM encoded file from SharePoint using Graph API and MIP SDK

Question

Hello, we have a SharePoint site containing a library that has IRM protection, so the files are all protected.

We have an application that needs to access said files, to read them and extract data from them. We usually did that using the SharePoint REST APIs and client-side object models (CSOM) but when trying that with the IRM protected files, we are getting a sort of a hash of the file, rather the file itself.

Our Azure application has the super_user delegated permission, but that does not seem sufficient.

We are currently exploring another option which would be to download the file with SharePoint REST APIs and client-side object models (CSOM) and then decrypt it using the MIP Protection SDK, but is this approach correct? I am doubtful whether the Microsoft Graph API is actually getting the encrypted file or just a random hash, and whether the MIP Protection SDK is capable of decrypting SharePoint IRM protected files.