AWS KMS CMP does not provide hook to enforce key ID on decrypt

[mattsb42-aws]

The AWS KMS CMP needs to provide an override mechanism to fail decryption if the decrypted key ID does not match the key ID that the CMP was created for.

https://github.com/awslabs/aws-dynamodb-encryption-java/blob/master/src/main/java/com/amazonaws/services/dynamodbv2/datamodeling/encryption/providers/DirectKmsMaterialProvider.java#L129-L130

https://github.com/awslabs/aws-dynamodb-encryption-java/blob/master/src/main/java/com/amazonaws/services/dynamodbv2/datamodeling/encryption/providers/DirectKmsMaterialProvider.java#L213-L222