Inserting a password encrypted with --raw when the sealing keys have rotated

[harry643]

Hey all, I need help understanding what the outcome of this scenario would be:

1. Encrypt a Secret manifest and output it into a file with kubeseal -f input_secret.yaml -w output_secret.yaml
2. 1 month passes and the sealed-secrets-controller rotates the sealing keys automatically.
3. I need to change one of the credentials in the manifest so I encrypt the new string on its own with kubeseal --raw --from-file=pword --name database-credentials --namespace example-environment.
4. Copy and paste that output into the existing SealedSecret manifest.

When I deploy that SealedSecret to the Kubernetes cluster, will the sealed-secrets-operator be able to 'unseal' the SealedSecret resource properly? Considering it has credentials encrypted with 2 different public keys.

Thanks!