type: aes256-gcm96
deletion_allowed: false
derived: false
exportable: false
allow_plaintext_backup: false