<?xml version="1.0" encoding="UTF-8"?>
<con:config xmlns:con="http://www.sourceid.org/2004/05/config">
    <!--
        Uncomment the below attribute to use an external key for encryption of PF Master Key.

        Supported key ID formats (with examples):
        - AwsKmsMasterKeyEncryptor:
            - Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
            - Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
            - Alias name: alias/ExampleAlias
            - Alias ARN: arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias

        - GcpKmsMasterKeyEncryptor:
            - Resource name: projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}

        [System Default: Commented out]
    -->
    <!--<con:item name="keyId"> put the key Id here </con:item>-->

    <!--
        Specifies whether PF Master Key is encrypted. This is automatically set by PF and should not be modified.

        [System Default: false]
     -->
    <con:item name="jwkEncrypted">false</con:item>
</con:config>