Add admin action to automatically re-encrypt all API keys

[stayradiated]

This will be useful if we ever need to change the root keychain secret.

Basically, loop through all API keys, decrypt them, re-encrypt them and write back to DB .

[stayradiated]

hopefully not necessary, we can do this later