I'm trying to switch my existing app to app signing by Google Play. There is a post with great instructions for those who use a keystore file: [How to enable Google Play App Signing](https://stackoverflow.com/questions/44103024/how-to-enable-google-play-app-signing)

My problem is that instead of a keystore I only have a .p12 file that I have not been able to import into a keystore file (long story). 

The first step for using app signing by Google Play is *"Export your app signing private key to a plaintext PEM file."* I did that and now I have plaintext PEM file derived from my original .p12. From Google instructions it seems that they only need the PEM file with my private key, not keystore file.

My question is how do I use the **pepk** tool to create an encrypted app signing private key that Google requires from the PEM file.