Multi-keyrings MUST call OnDecrypt on list of child keyrings in order

[robin-aws]

The specification currently only states that if a generator is specified, it MUST be used first.

It also technically doesn't specify that the calls should be sequential, which it should to the same degree that OnEncrypt does (see also #146 for thoughts on a potential future parallel version).