The apiserver encryption provider order changes, and one controller can no longer read older Secrets until the keyring catches up

Cluster encryption is enabled, yet partial key visibility creates asymmetric control-plane failures.