While key rotation is being completed, files are downloaded, decrypted, then re-encrypted with the new key. This can take a lot of time (potentially days or weeks if there is a lot of data) -- during this time, there are files that are encrypted with two different keys. ExfileEncryption needs to be able to decrypt files during the key rotation is taking place, so decryption should support attempting decryption with multiple keys.