---
schema: deckhand/Passphrase/v1
metadata:
  schema: metadata/Document/v1
  name: apiserver-encryption-key-key1
  layeringDefinition:
    abstract: false
    layer: site
  storagePolicy: cleartext
# head -c 32 /dev/urandom | base64
data: ShMq3FztlkBMTDMKmKBv9Nq0Rk6h5hGWwZTyUnYjxlM=
...