I spent a while today troubleshooting why the 'Location' header wasn't getting returned in an XHR Request handler (using POST to create an Object and getting the location from the 'Location' header in a PhoneGap app), turns out released WebKit browsers don't honor the Access-Control-Expose-Header directive. Just verified this behavior is fixed in the WebKit nightlies (using Safari running latest update to WebKit). Sweet job webkit guys!
In the USA it is not legal (in violation of the 5th amendment) for the court to compel you to reveal a password (if your read the brief the Judge says as much). However, if the court can prove by other means that you own the data on a drive, they can compel you to provide them with the unencrypted contents of the drive via a search warrant.
They know you stole the car because they've got surveillance video so now they're serving you with a warrant to produce the car so they can also prove physical presence in the vehicle. This is my view of the ruling.
The chick got recorded talking about the documents so they're asking for a readable version.