Encapsulates one entry in the CipherInfo table sent as part of Colmetadata. The same CEK is encrypted multiple times with different master keys (for master key rotation scenario) We need to keep all these around until we can resolve the CEK using the correct master key.