Validate encrypted DKEK