You can do this with a change like the following:

dsconfig set-global-sync-configuration-prop \
     --set changelog-password-decryption-key:<this-is-the-key-you-want-to-use>