Yes, they can still decrypt old versions.<p>Storing secret keys, API keys, etc. in your git repo is a terrible idea and an antipattern any way you slice it. Keep your secrets out of version control.<p>The quoted advice is extremely bad. If someone who has access to a secret of any importance leaves your team, the <i>only</i> acceptable response is to rotate the secret.