Audit Chain 1.2.0

- drush audit-chain:reencrypt --from=… --to=…
- decodeMetadata/verify use each row's recorded encryption_profile