Key rotation support via list of keys

Supports a comma delimited set of secrets and tries decryption against each.
If we can figure out why the tests are failing then this should be good.