decrypting with primary key when not meant for decryption

[tomholub]

a customer may be relying on this workflow

[tomholub]

Need an OrgRule for this, and then update tests written in #3054 to test the opposite if the OrgRule is active.

[tomholub]

Waiting for customer info, maybe they can fix this on sender side.