Any teams that tail the oplog need to be aware of a disaggregated storage change to introduce a new type of oplog message. This oplog message type is only generated in disaggregated storage.

Description of Linked Ticket

When rotating to a new KEK, we need to dump the encrypted KEK object out to the oplog specifically for PIT restore, since PIT restore starts at a checkpoint and then uses the oplog to jog the system to a specific point-in-time. The oplog therefore needs to have the encrypted KEK to decrypt future oplog messages encrypted with the new KEK.