migrateBatch

Re-encrypts up to maxRecords records that are not sealed with the current key, in one transaction. A record that fails to open fails the whole batch. Returns how many such records remain.