Since it now looks fairly likely that the mechanism is the EPG descriptor, I've updated the web interface to display the 'Enc' icon against these protected recordings in the EPG screens.
With apologies for my ignorance, it seems to me that, in principle, there might be at least four different places where one might encounter information that might be pertinent to any 'scramble/do not copy' indicator:
a) in the EPG information transmitted ahead of the time of the programme in question;
b) in the EPG information transmitted whilst the programme is actually being transmitted
c) within the transmission data stream, but outside the EPG information (if the mechanism is to be effective, would they really just rely on the EPG to carry it? Or maybe the fact that the transmission (for HD) is scrambled anyway is sufficient?)
d) in the EPG information held within the hmt file (which presumably derives from one of the above?)
If so, do we have any confidence that they will all carry the same value? And do we know which of these sources the Humax itself uses? As far as I can tell, the Humax itself doesn't show the information ahead of time in the displayed EPG (at least for SD).
Just a thought - but based on ignorance.