StPeters: fully complete key rollover (replace also encryption key)