serf: storing only a single new encryption key so we can fire an event later to do the swap.