re-encrypt s3 secret