Clarify where keys reside when checking an `m.room.encrypted` event.