Reencrypt Stored Provider Keys

Re-encrypt stored provider keys with the primary OTARI_SECRET_KEY.

Operators rotate OTARI_SECRET_KEY by setting it to new,old first, restarting, running this endpoint, then removing the old key and restarting again. Rows that cannot be decrypted are left untouched and must be recovered by replacing the affected provider keys.