An application needs ciphertext updated to the latest transit key version without receiving plaintext in the migration process. Which operation fits?

1. Change the database column type only
2. Export the plaintext and email it to the operator
3. Rename the transit key's HTTP endpoint
4. Rewrap