This is used for when an administrator prefers to manually generate the encryption keys instead of letting the Policy Propagator handle it.

EncryptionKeysReconciler is responsible for rotating the AES encryption key in the "policy-encryption-key" Secrets for all managed clusters.