Support CMS decrypt without a certificate for all key types