Key id needs to be more specific than just the version in order to us…

…e Seal HA with multiple transit seals

wrappers/transit/transit.go

@@ -18,7 +18,9 @@ import (
 type Wrapper struct {
 	logger       hclog.Logger
 	client       transitClientEncryptor
+	keyName      string
 	currentKeyId *atomic.Value
+	keyIdPrefix  string
 }
 
 var _ wrapping.Wrapper = (*Wrapper)(nil)
@@ -47,6 +49,8 @@ func (s *Wrapper) SetConfig(_ context.Context, opt ...wrapping.Option) (*wrappin
 	}
 	s.client = client
 
+	s.keyIdPrefix = client.mountPath + "/" + client.keyName + "/"
+
 	// Send a value to test the wrapper and to set the current key id
 	if _, err := s.Encrypt(context.Background(), []byte("a")); err != nil {
 		client.Close()
@@ -88,7 +92,7 @@ func (s *Wrapper) Encrypt(_ context.Context, plaintext []byte, _ ...wrapping.Opt
 	if len(splitKey) != 3 {
 		return nil, errors.New("invalid ciphertext returned")
 	}
-	keyId := splitKey[1]
+	keyId := s.keyIdPrefix + splitKey[1]
 	s.currentKeyId.Store(keyId)
 
 	ret := &wrapping.BlobInfo{