v1.0.0-beta.4

Fix key pruning & rotation

Correctly sets `MinDecryptionVersion` on policy to ensure expired keys are deleted

Also
* Removese `clock` from backend, cannot inject into Policy functions and thus makes it _hard_ to use for testing things like rotation and pruning.
* Logs the mount (not key name) during rotation; required adding “mount” to chain of calling functions