Check that we can decrypt a DKDM when it is loaded (#1011).