add statements of intent for keyring encrypt and decrypt behavior

[mattsb42-aws]

As discussed here[1], we should add a statement of intent to the keyring interface spec that describes how and when a keyring MUST or MUST NOT halt operation.

[1] #74 (comment)