SERVER-125887 handles decrypting passphrase-protected private keys for gRPC egress, because this is a known gap in the gRPC implementation at time of writing. If/when the gap is patched upstream in gRPC, we should remove the custom decryption logic.