Feature Request: Multiple key support

We have many kubernetes clusters. For lots of secrets, we encrypt them per-cluster, as they're unique to that cluster.

For some secrets, we would like to encrypt them once, and have all clusters be able to decrypt those secrets. Examples might be, the newrelic or pagerduty API keys. Each cluster would have the dynamically generated key that's unique to it, and we would like to use that key to encrypt the global decryption key.

This could be modelled by allowing SealedSecrets to optionally reference a different decryption key, potentially?