now provides a method to get the wrapped SecretKey from the header