groupId may only be in the first recps slot

[mixmix]

The private-groups-spec says that the groupId / groupKey may only be put in the first slot.
I don't think the current code enforces this.

Note that decrypt correctly assumes that you can only check the first slot with groupKeys (Attempt1). This only works if groupKey was used is in the first slot though :)