Switching to different aws kms key id (with the same key material)

[zerkms]

@tmiroslav

Good to know would be if unsealed keys retrieved during Vault initializations are enough to get Vault back to unseal state after trouble with.

Those are recovery keys and those cannot be used for unsealing.