Re-identify the CRYPTO_REPLACE values in a text.

Finds every CRYPTO_REPLACE token ({{...}}) in the text, decrypts it with the crypto key of the named policy, and returns the text with each token that decrypted replaced by its original value. A token that does not decrypt, because it was altered or encrypted under another key, is left as it is and counted as failed. FPE_ENCRYPT_REPLACE and other strategies are not restored. The caller must supply a stated reason, which is recorded in the audit log with the tokens and the counts. An admin may act for another user by supplying that user's username via the owner parameter. Requires the reidentify scope.