Encryption file in CLUSTER.tar.gz

[clickersmudge]

Hi,
The first installation of KubeOne generates the file CLUSTER.tar.gz, which contains, with encryption enabled, the file "encryption-providers.yaml"

However, any subsequent change that triggers

kubeone apply --credentials credentials.yaml --manifest kubeone.yaml --tfjson tf.json --force-upgrade

It overwrites this file.
The new file no longer contains the encryption key. Is this the intention?