Some types (encryptor, decryptor) hold their own status objects inside them, and on failure, the caller checks the status with a mongocrypt_type_status method.  Other types (key_broker) require a status to be passed into each function call.  Let's pick one of these conventions and use it for all our public API.