Enabling encryption: Handle external account decryption in PermsStore, add docs for reversing OOB migrations.
Created by: arussellsaw
probably should be two PRs but it's small and covering issues related to enabling encryption, i was getting an error from repo-updater after configuring encryption keys, looks like we just needed to pass keys to the PermsStore