hswaw/kube: encrypt keys, update expired keys

cz2's key has expired. Removing it for now as there's no easy way to
force gpg to encrypt content for expired keys.

Change-Id: Ib27b9a09385fcead1ba2d48ebf45426038d8b647
diff --git a/tools/secretstore.py b/tools/secretstore.py
index 8ff5e2a..55af48c 100644
--- a/tools/secretstore.py
+++ b/tools/secretstore.py
@@ -10,7 +10,7 @@
 keys = [
     "63DFE737F078657CC8A51C00C29ADD73B3563D82", # q3k
     "482FF104C29294AD1CAF827BA43890A3DE74ECC7", # inf
-    "F07205946C07EEB2041A72FBC60C64879534F768", # cz2
+    # "F07205946C07EEB2041A72FBC60C64879534F768", # cz2 (expired 2020-01-17)
     "0879F9FCA1C836677BB808C870FD60197E195C26", # implr
 ]