See https://github.com/awslabs/aws-encryption-sdk-specification/issues/182 Blocked on adding new field to AWS Encryption SDK in Python: https://github.com/aws/aws-encryption-sdk-python/issues/283