anchor.diff:   truststoreType=JKS
    truststorePasswd=changeme
    proxiedEntity=user1@NIFI.COM
  -```
  +----
   
   In this example, the certificate in _keystore.jks_ would be for the NiFi Registry server, for example "CN=localhost, OU=NIFI". This identity would need to be defined as a user in NiFi Registry and given permissions to 'Proxy'.
   
  
positive.code: 
  As a result, the _nifi.properties_ file is overwritten with protected properties and sibling encryption identifiers (`aes/gcm/256`, the currently supported algorithm):
  
  ```
  # security properties #
  nifi.sensitive.props.key=n2z+tTTbHuZ4V4V2||uWhdasyDXD4ZG2lMAes/vqh6u4vaz4xgL4aEbF4Y/dXevqk3ulRcOwf1vc4RDQ==
  nifi.sensitive.props.key.protected=aes/gcm/256
  
negative.code:       return "This is my new command";
    }
  }
  ----
  
  Add the new command to `NiFiCommandGroup`:
  
  [source]
  ----
  commands.add(new MyCommand());
  ----
  
  To add a NiFi Registry command, perform the same steps, but extend from `AbstractNiFiRegistryCommand`, and add the command to `NiFiRegistryCommandGroup`.
  
  