anchor.diff:  ----
   $ export CONFLUENT_SECURITY_MASTER_KEY=Nf1IL2bmqRdEz2DO//gX2C+4PjF5j8hGXYSu9Na9bao=
   ----
  +
  +To protect this environment variable in a production host, you can set the master encryption key at the process level instead of the global machine level.
  +For example, you could set it in the systemd overrides for executed processes, restricting the environment directives file to root-only access.
   
   === Encrypt the value of a configuration parameter
   
  
positive.code: 
  == Introduction
  
  Confluent's Secret Protection feature encrypts sensitive data.
  Instead of storing passwords or other sensitive data as clear text, Secret Protection encrypts it within the configuration file itself.
  
  === How to Use This Tutorial
  
  
negative.code: 
  === Update the value of the configuration parameter
  
  You may have a requirement to update secrets on a regular basis, to help them from getting stale.
  The configuration parameter `config.storage.topic` was originally set to `connect-configs`.
  If you need to change the value in the future, you can update it directly using the CLI.
  In the CLI below, pass in a file `/path/to/updated-config-and-value` that has written `config.storage.topic=newTopicName`, to avoid logging history showing the new value.
  