PROUTIL EPOLICY MANAGE allows you to rekey the cipher of an existing encryption policy.

To update the key of a policy, enter the following command: 
proutil dbname -C epolicy manage object-type rekey object-name