Function unwrapKeyset

Unwraps a keyset and checks that the private keys match the stored public keys and signature, so a server can't pair someone's wrapped secrets with other public keys.