CKM: Remove all keys after encryption group is finished