diff --git a/changelog.d/929.bugfix b/changelog.d/929.bugfix
new file mode 100644
index 000000000..7261adb48
--- /dev/null
+++ b/changelog.d/929.bugfix
@@ -0,0 +1 @@
+Track which key was used to encrypt secrets in storage, and encrypt/decrypt secrets in Rust.