SET [ ENCRYPTION ] KEY IDENTIFIED BY HSM_auth_string MIGRATE USING software_keystore_password [ WITH BACKUP [ USING 'backup_identifier' ] ]