pub async fn decrypt_broker_snapshot( config: &Config, snapshot: &WorkspaceSnapshot, release: &[String], ) -> Result<BTreeMap<String, String>>