Rotate the key to slot 2

After merging this PR the update_engine will look at slot 2 of the
metadata to verify the contents of the update payload.