On encryption key rotation, only the md5 hash for the first form in the project formList is updated. This should not be the case since the forms need to be synced in ODK Collect once the form version and hash change to ensure a smooth transition after key rotation.