switch to using a volume instead of an env var for encryption key

[colearendt]

Switching to draft because this breaks the permissions on the rstudio-pm.key file due to mounting weirdness in Kubernetes.