DOCSP-31139: fix description of CSFLE behavior (#3502)

Author: Chris Cho

source/core/csfle/reference/decryption.txt

@@ -48,10 +48,10 @@ performs the following procedure:
 #. Check the {+key-vault-long+} configured in the current database
    connection for the specified {+dek-long+}. If the {+key-vault-long+}
    does not contain the specified key, automatic decryption fails and
-   the driver returns the encrypted ``BinData`` blob.
-   
+   the driver returns an error.
+
 #. Check the {+dek-long+} metadata for the {+cmk-long+}
-   (CMK) used to encrypt the key material. 
+   (CMK) used to encrypt the key material.
 
 #. Decrypt the {+dek-long+}. This process varies by KMS provider:
 
@@ -82,7 +82,7 @@ performs the following procedure:
          encrypted ``BinData`` blob.
 
          .. tip::
-         
+
             To learn how to use the Google Cloud Platform KMS for automatic
             encryption, see :ref:`csfle-tutorial-automatic-gcp`.
 
@@ -95,8 +95,8 @@ performs the following procedure:
          the CMK, decryption fails and the driver returns the
          encrypted ``BinData`` blob.
 
-         .. tip:: 
-         
+         .. tip::
+
             To learn how to use the Azure Key Vault for automatic
             encryption, see :ref:`csfle-tutorial-automatic-azure`.