IDP-616

[Tom Zeller]

On Thu, Feb 26, 2015 at 5:06 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> I think all that's missing is a way to know what the key used to encrypt
> the previous blob was, and I can probably do something to the DataSealer
> to expose that with a new API for the unseal() call. If they don't match,
> I could hopefully just tag the record dirty and be done with it.

I looked very briefly today, and I thought unwrap() could return
something like Pair<String, Boolean> to indicate whether the key is
stale instead of just String, but that might be a horrible API change,
dunno.