Update VM crypto docs on rekey

This patch adds more documentation around rekeying an
encrypted VM to explain that rekeying requires the
encryption classes to have different provider and/or key IDs.