Fixup the KmsKeyring spec to prefer GDK

[kessplas]

See #143 and the exceptions added there.
The spec was written to imply Encrypt is the preferred KMS API, but it should be GDK first,
and only (maybe/should) use Encrypt when the Materials already have an existing data key.