DecryptConfig contains all the decryption config including the subsample entries. 
This should be preferred over passing in an empty vector to indicate that the buffer is encrypted. DecoderBuffer::decrypt_config() returns nullptr if the buffer is not encrypted. So we'll have one way to indicate that the buffer is clear/encrypted.