The two legacy entries git-crypt-key-{dotfiles,server-config} stay until muffin has deployed this config at least once and the new CI pipeline is green. Phase 6 removes them after cutover.
