---
schema: deckhand/Passphrase/v1
metadata:
  schema: metadata/Document/v1
  name: apiserver-encryption-key-key1
  layeringDefinition:
    abstract: false
    layer: type
  storagePolicy: cleartext
# head -c 32 /dev/urandom | base64
data: AH/KZrduGOc8NRs5Dkp1maqaOrVY+HZ9pAD/fCweMqw=
...