there should be a command to change the encryption secret on the fly
# changes the encryption secret for all contexts (if not explicitly set in a custom context, see example below)
git secrets set global-secret <newSecretName>
# changes the encryption secret for a specific context
git secrets set global-secret <newSecretName> -c <contextName>