anchor.diff:  NiFi Registry will attempt to validate this ticket with the KDC. If it is successful, the user's _principal_ will be returned as the identity, and the flow will follow
   login/credential authentication, in that a JWT will be issued in the response to prevent the unnecessary overhead of Kerberos authentication on every subsequent request.
   If the ticket cannot be validated, it will return with the appropriate error response code. The user will then be able to provide their Kerberos credentials to the login
  -form if the `KerberosLoginIdentityProvider` has been configured. See <<kerberos_login_identity_provider>> login identity provider for more details.
  +form if the `KerberosIdentityProvider` has been configured. See <<kerberos_identity_provider>> identity provider for more details.
   
   NiFi Registry will only respond to Kerberos SPNEGO negotiation over an HTTPS connection, as unsecured requests are never authenticated.
   
  
positive.code: ./bin/encrypt-config nifi-registry [options]
  ----
  
  The options are the following:
  
   * -a,--authorizers-xml <ARG>                   The authorizers.xml file containing unprotected config values. This file will be overwritten if no output file is specified.
   * -A,--output-authorizers-xml <ARG>            The destination authorizers.xml file containing protected config values. If specified, the input authorizers.xml will not be modified.
   * -b,--bootstrap-conf <ARG>                    The bootstrap.conf file containing no master key or an existing master key. If a new password/key is specified and no output bootstrap.conf file is specified, then this file will be overwritten to persist the new master key.
   * -B,--output-bootstrap-conf <ARG>             The destination bootstrap.conf file to persist master key. If specified, the  input bootstrap.conf will not be modified.
   * -h,--help                                    Show usage information (this message)
   * -i,--identity-providers-xml <ARG>            The identity-providers.xml file containing unprotected config values. This file will be overwritten if no output file is specified.
   * -I,--output-identity-providers-xml <ARG>     The destination identity-providers.xml file containing protected config values. If specified, the input identity-providers.xml will not be modified.
   * -k,--key <KEY>                               Protect the files using a raw hexadecimal key. If an argument is not provided to this flag, interactive mode will be triggered to prompt the user to enter the key.
   * --old-key <KEY>                           If the input files are already protected using a key, this specifies the raw hexadecimal key so that the files can be unprotected before re-protecting.
   * --old-password <PASSWORD>                 If the input files are already protected using a password-derived key, this specifies the old password so that the files can be unprotected before re-protecting.
   * -p,--password <PASSWORD>                     Protect the files using a password-derived key. If an argument is not provided to this flag, interactive mode will be triggered to prompt the user to enter the password.
   * -r,--nifi-registry-properties <ARG>          The nifi-registry.properties file containing unprotected config values. This file will be overwritten if no output file is specified.
   * -R,--output-nifi-registry-properties <ARG>   The destination nifi-registry.properties file containing protected config values. If specified, the input nifi-registry.properties will not be modified.
   * -v,--verbose                                 Enables verbose mode (off by default)
  
  
  As an example of how the tool works, assume that you have installed the tool on a machine supporting 256-bit encryption and with the following existing values in the 'nifi-registry.properties' file:
  
  ----
  # security properties #
  
negative.code: Enter the following arguments when using the tool:
  
  ----
  ./bin/encrypt-config.sh nifi-registry \
  -b bootstrap.conf \
  -k 0123456789ABCDEFFEDCBA98765432100123456789ABCDEFFEDCBA9876543210 \
  -r nifi-registry.properties
  ----
  
  