docs: protected String getEncryptionKey() {
          if (extendedMetadata != null && extendedMetadata.getEncryptionKey() != null) {
              return extendedMetadata.getEncryptionKey();
          } else {
              return keyManager.getDefaultCredentialName();
          }
      }