Change FileVault setting for existing/scoped users

[sshort]

Anyone have experience with adjusting a FileVault profile when the user is already scoped?

Currently using an institutional recovery key, would like to edit my existing profile and shift to the institutional & personal keys. I'm hoping this "just works" and newly enrolled users get both (with no affect on machines already encrypted with the institutional key). 

I'm want to avoid a situation where the users already in scope begin to decrypt, and then re-encrypt with "new" recovery keys.

Thanks,

Stephen

[sshort · Accepted solution]

Hi all -- I did some testing, changing from institutional to institutional + personal keys for existing users has no ill effects.