keyczar: Validate results when decrypted password protected keys.

The key format does not have any HMAC, so it is possible for decryption to
succeed but produce garbage. We now validate it by decoding it as UTF-8, then
trying to parse it as JSON. If it passes, it is extremely likely to have been
decrypted correctly.