s3-rpc: Decrypt with the proper session key in CreateTrustedDomainEx2.