Need help: JCOW404 R3.14.1 - key.txt / server.key for backup decryption

[maqboolbrw]

Need help: JCOW404 R3.14.1 - key.txt / server.key for backup decryption
Router: JCOW404 (Sercomm, armv7l)
JCOW404 R3.14.1.zip

Firmware: SRCMTF1_JCOW404_R3.14.1
Serial: RSTOTHHB0042700
What I'm trying to do
Disable WiFi SSID broadcast on my Jio Fiber router. I'm using a separate D-Link router for WiFi and want to stop the Jio router from broadcasting its SSID.
What I've done so far

Disabled both APs (ap3, ap6) via admin console JS
Set transmit power to minimum (1 dBm)
Found hidden wifiOnOff.html page and toggled WiFi off
None of this stops the SSID from broadcasting — the radio stays active regardless
Broadcast SSID toggle and radio on/off pages are superadmin-only (401)

What I need
The encryption key at /flash/secure/key.txt to decrypt my backup config (.enc file) so I can inject the telnet command and get root access.
I've already:

• Downloaded the backup config (.enc file) - uses OpenSSL AES-128-CBC salted encryption
• Downloaded dbglog via dbglog.cgi - contains dbglogs-encr.tgz + randk_enc (128 bytes, RSA encrypted)
• Tried the keyguesser.py approach with hundreds of key combinations - all failed
• The old known keys (TeamF1, 5e9KC4Fs, etc.) don't work on R3.14.1

My files (can share if needed)

• RSTOTHHB0042700_JCOW404.enc.txt (176,304 bytes) — encrypted backup config
• dbglogs-encr.tgz (2,872,864 bytes) — encrypted debug logs
• randk_enc (128 bytes) — RSA-encrypted random key for dbglog

Questions

• Has anyone rooted a JCOW404 with R3.x firmware? If so, could you share the /flash/secure/key.txt?
• Is the key the same across all JCOW404 units on the same firmware version, or per-device?
• Is there an alternative way to get root without the backup config method on R3.14.1?
• Does anyone have the JCOW404 firmware .img URL? (I've seen JCOW414 URLs but not JCOW404)

Any help would be greatly appreciated!