json_schema: {
      "properties": {
          "EncryptCertPayloadUUID": {
              "description": "The UUID of a payload within the same profile that contains a certificate whose public key is used to encrypt the recovery key when it is sent to the redirected URL. The referenced payload must be of type com.apple.security.pkcs1.",
              "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
              "type": "string"
          },
          "PayloadDescription": {
              "default": "FileVault Recovery Key Redirection Payload",
              "description": "Description of the payload",
              "type": "string"
          },
          "PayloadDisplayName": {
              "default": "FileVault Recovery Key Redirection Payload",
              "description": "Name of the payload",
              "type": "string"
          },
          "PayloadIdentifier": {
              "default": "com.apple.security.FDERecoveryRedirect",
              "description": "A unique identifier for the payload, dot-delimited.  Usually root PayloadIdentifier+subidentifier",
              "type": "string"
          },
          "PayloadOrganization": {
              "description": "This value describes the issuing organization of the profile, as displayed to the user",
              "type": "string"
          },
          "PayloadType": {
              "default": "com.apple.security.FDERecoveryRedirect",
              "description": "The type of the payload, a reverse dns string",
              "type": "string"
          },
          "PayloadUUID": {
              "default": "",
              "description": "Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF)",
              "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
              "type": "string"
          },
          "PayloadVersion": {
              "default": 1,
              "description": "The version of the whole configuration profile.",
              "type": "number"
          },
          "RedirectURL": {
              "description": "The URL to which FDE recovery keys should be sent instead of Apple. Must begin with https://.",
              "pattern": "^https://.*$",
              "type": "string"
          }
      },
      "title": "com.apple.security.FDERecoveryRedirect",
      "type": "object"
  }