creation_rules:
- encrypted_regex: "^(data|stringData)$"
  # BD1A: new gpg key
  # 6878: in cluster key
  pgp: >-
    BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD,
    687802D4DFD8AA82EA55666CF7DADAC782D7663D