If the key is different, then don't we also need to remove the old key from `node["provisioner"]["access_keys"]`?