
This patch adds a new subcommand to `barbican-manage`: barbican-manage simple_crypto new_pkek --project $PROJECT_ID The subcommand adds a new Project-specific Key-encryption-key (pKEK) for the specified project. Previous pKEKs are marked as inactive, so all new secrets uploaded for that project will be encrypted using the new pKEK. Change-Id: Ica7ab4889ffb656d026095db8b43590000ceb546