aesGcm({ k2: newKey, k1: oldKey }): 32-byte keys (Buffer, or hex / base64 text).
aesGcm({ k2: newKey, k1: oldKey })
aesGcm({ k2: newKey, k1: oldKey }): 32-byte keys (Buffer, or hex / base64 text).