Allow N-keys (one should apply)

During hmac validation allow there to be N keys and one
of those keys must validate, if none do the old behavior
continues to operate as is. This makes it easier to roll
out new keys incrementally.

Change-Id: I12d05329de5418baf6b1eb45fe85e8ce627c49ea
Merge "Allow N-keys (one should apply)"