The service must be running to allow reencryption of the service master key. Encrypted secrets may not be recoverable if ...