Continue to support read using the old scheme, but even when an integrity key is available, only use it to aid in decrypting classic format, and always write in new format.