I still don't get how can there be two encryption keys, according to:
https://source.android.com/devices/bootloader/partitions-images
encryption is related to metadata partition. But the partitions that have multiple slots are boot, system, vendor, and radio. I also tried to restore a backup...