Dude even if twrp shows encrypted you can still flash supersu. Just mount the /system partition in Mount options and flash supersu via otg.
But what is causing this problem in the first place? Is it because twrp is give permissions to make changes to the /system partition? And this dm-verity thing, will it cause any problems if left as it is?