Currently the available options are:
<name>
<encryptionmethod>
Please also add <encryptionkey> so existing keys can be reused for already existing environments (with already encrypted data)
Please also add a new command to export existing encryption key:
/exportencryptionkey <name> <destinationfilename>
This comes in very handy to create a backup when running a scripted BP configuration (configure BP & service + create backup of essential data).