Generate encryption info for the bucket outside bucket lock

This Jira is to generate FileEncryption for a key outside the bucket lock.
As right now, we hold the lock when making a network call to KMS to obtain encryption info.