I mostly don't think this is going to accomplish anything.  Any chicken-and-egg encryption key issues in the upgrade scenario will have to be sorted out a different way.