A policy may be defined to control which users are permitted access to a key to decode the encoded content.