updatekeys doesn't imply that it updates other things from .sops.conf (see the discussion #1509 (comment)), so how about making this behavior configurable? I.e. allow the user to say that they want the Shamir threshold from .conf.sops being used, or that they want to keep it (if not explicitly overridden on CLI).

Ref: #1609
Ref: #1509