{
  "operation": "io.systemd.Credentials.Encrypt",
  "description": "Encrypt a database password into a systemd encrypted credential blob (TPM2-bound when available) so it can be supplied to a unit via LoadCredentialEncrypted=.",
  "request": {
    "name": "db-password",
    "data": "c2VjcmV0LXBhc3N3b3JkLWhlcmU=",
    "notAfter": 4102444800000000
  },
  "response": {
    "blob": "AAAAAQAAACgw...truncated...=="
  }
}