KeyStore API changes to work with decrypting offsets