SET [ ENCRYPTION ] KEY IDENTIFIED BY HSM_auth_string
  MIGRATE USING software_keystore_password
  [ WITH BACKUP [ USING 'backup_identifier' ] ]