Add support for KEK decrypt in cms utility.