repository encryption key management tool