Disable customer-managed key

Disables the workspace's customer-managed encryption key. Every secret currently protected by that key is first moved back under the Brix-managed key, so nothing becomes unreadable, and only then is the key record removed. Returns 409 if the customer-managed key can no longer be reached.

Notes.

• key is null when the first pass moved every secret back; otherwise it shows disabling until the hourly pass finishes.