namespace IdentityShroud.Core.Security; public record EncryptedDek(KekId KekId, byte[] Value);