Probably somewhere around this line needs to also check if the `--config` file switch was used and change accordingly https://github.com/mozilla/sops/blob/master/cmd/sops/main.go#L421 Our workaround is to rotate the key: `sops -i -r <file>` which does honour the `--config` switch.