Changes

This call takes a wrapped key and calls <tt>successCB</tt> with the resulting plaintext key (same base64-encoded string provided at wrap time). The <tt>origin</tt> must match that used at wrap time.