Parameters related to encryption-at-rest.
If set, generate a key and use it to lock data stored on the managers.