markRetiring
abstract suspend fun markRetiring(from: StorageKeyRotationState.Migrating, requireRetirable: (Map<StorageKeyId, Long>) -> Unit)
MIGRATING to RETIRING, in one transaction: drops whatever only the retiring key needed for opening, runs keyReferences and passes the result to requireRetirable, and commits only if it returns. From then on the storage no longer needs the retiring key.