Documentation
¶
Overview ¶
cek-rewrap — the one-time migration for "a store's key names its owner".
Walks every per-org store and moves its sidecar from the legacy Global derivation to the owner-bound one, carrying the SAME DEK across. Read-only unless a store actually needs migrating; --dry-run reports without writing.
Source Files
Click to show internal directories.
Click to hide internal directories.