In one embodiment, a path computation client (PCC) generates a path computation request and transmits the path computation request to a path computation element (PCE). The PCC receives from the PCE a response including path segments defining a path, at least one of the path segments being an encrypted path segment that has been encrypted according to an encryption algorithm associated with a remote domain. The PCC then generates a path reservation message that includes the encrypted path segment. This is done without decrypting the encrypted path segment at the PCC. The PCC transmits the path reservation message to one or more nodes along the path, which may be capable of decrypting the encrypted path segment.