docs: private static SecretKey cekByKMS(byte[] cekSecured, String keyWrapAlgo,
                                        EncryptionMaterials materials,
                                        ContentCryptoScheme contentCryptoScheme, AWSKMS kms) {
          DecryptRequest kmsreq = new DecryptRequest()
              .withEncryptionContext(materials.getMaterialsDescription())
              .withCiphertextBlob(ByteBuffer.wrap(cekSecured));
          DecryptResult result = kms.decrypt(kmsreq);
          return new SecretKeySpec(copyAllBytesFrom(result.getPlaintext()),
                                   contentCryptoScheme.getKeyGeneratorAlgorithm());
      }