How can I remove a key from the set of keys allowed for encryption of private data?