An EncryptedAttribute should only have EncryptedKeys retrieved from the root and not contain EncryptedKey elements obtained through the EncryptedData element.