Only proactively rotate PII fingerprints when PII is decrypted

[mitchellhenke]

🛠 Summary of changes

We currently check some fingerprints and encrypted attributes in the Pii::Cacher class to see if they need to be rotated. We should be able to rely on

identity-idp/lib/tasks/rotate.rake

Lines 7 to 28 in 7125934

	task attribute_encryption_key: :environment do
	num_users = User.count
	progress = new_progress_bar('Users', num_users)
	User.find_in_batches.with_index do |users, _batch|
	User.transaction do
	users.each do |user|
	user.phone_configurations.each do |phone_configuration|
	rotator = KeyRotator::AttributeEncryption.new(phone_configuration)
	rotator.rotate
	end
	user.email_addresses.each do |email_address|
	rotator = KeyRotator::AttributeEncryption.new(email_address)
	rotator.rotate
	end
	progress&.increment
	rescue StandardError => err # Don't use user.email in output...
	Kernel.puts "Error with user id:#{user.id} #{err.message} #{err.backtrace}"
	end
	end
	end
	end

for rotating encrypted attributes in a complete manner.

[mitchellhenke]

this is an unused field after #5584