anchor.diff:  Before you start:
   
   . Download link:https://www.confluent.io/download/[Confluent Platform 5.3] or higher
  -. Get the new link:https://docs.confluent.io/current/cli/installing.html[Confluent CLI] (v0.103.0 or above)
  +. Get the new link:https://docs.confluent.io/current/cli/installing.html[Confluent CLI] (v0.128.0 or above)
   
   == Workflow
   
  
positive.code: 
  == Introduction
  
  Confluent's Secret Protection feature encrypts sensitive data.
  Instead of storing passwords or other sensitive data as clear text, Secret Protection encrypts it within the configuration file itself.
  
  === How to Use This Tutorial
  
  
negative.code: ----
  $ export CONFLUENT_SECURITY_MASTER_KEY=Nf1IL2bmqRdEz2DO//gX2C+4PjF5j8hGXYSu9Na9bao=
  ----
  
  To protect this environment variable in a production host, you can set the master encryption key at the process level instead of the global machine level.
  For example, you could set it in the systemd overrides for executed processes, restricting the environment directives file to root-only access.
  
  === Encrypt the value of a configuration parameter
  
  