sm: Allow decryption even if expired other keys are configured.