Fail Fatal KeyPolicy is required

[shadycuz]

cfn-nag says KeyPolicy is required for KMS key but cloudformation docs says its optional.

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html#cfn-kms-key-keypolicy