re-encrypting AWS variables for new project owner