Decrypt a file using a specified key, key ring, and location
gcloud kms decrypt --key=key_name --keyring=keyring_name --location=global --ciphertext-file=path/to/ciphertext --plaintext-file=path/to/plaintext