--binlog-encryption=on
--innodb-redo-log-encrypt=on
--innodb-undo-log-encrypt=on
--early-plugin-load="keyring_file=$KEYRING_PLUGIN"
--loose-keyring_file_data=$MYSQL_TMP_DIR/mysecret_keyring
$KEYRING_PLUGIN_OPT