There may be situations in which you want to:
Remove encryption entirely
Change the current master key, either because the key has been forgotten or because you want to change the current key as a part of a security routine.
Important Ambari Server should not be running when you do this.