misinterpretation of the spec corrected. keyId of unencrypted tracks is 16 zero bytes (before I left it out completely).