Return empty DecryptConfig when no keys to force decryption
Return empty DecryptConfig when no keys to force decryption

Signed-off-by: Brandon Lum <3f6482c5eb7fd38182f7c556102c9a320d585f85@gmail.com>

kubernetes-incubator/ocid,nalind/cri-o,nalind/cri-o,nalind/cri-o,kubernetes-incubator/ocid,kubernetes-incubator/cri-o,kubernetes-incubator/cri-o,kubernetes-incubator/ocid,kubernetes-incubator/cri-o,kubernetes-incubator/cri-o