asEncryptedStoreHandle

EncryptedStoreHandle that forces a DataStore rewrite so ciphertext is sealed under the current primary key material after rotation.