defer key type check from decrypt_sig to decode_key_data

Conflicts:
	src/chef_authn.erl