php,sagepay,rfc1738
You are correct. Because the Success / Failure URLs are encrypted within the Crypt field, there is no need to encode them.