DB Clone with TDE Column Encryption

We're looking to use TDE Column encryption with a local wallet for production and clone the production database to lower environments using file level snapshots (not RMAN).

Ideally, we would like to
1. clone the DB to a staging environment on a different host from production

2. Open the staging database with credentials to access the encrypted data

3. Update the values in the encrypted columns to test/dummy data

4. Turn off TDE encryption

5. Clone the staging database to DEV/TEST/QA databases as needed.

What is the best way to manage the wallet access in the staging environment?