code: public static CipherExecutor newTicketRegistryCipherExecutor(final EncryptionRandomizedSigningJwtCryptographyProperties registry,
                                                                   final boolean forceIfBlankKeys,
                                                                   final String registryName) {
  
          val enabled = FunctionUtils.doIf(
              !registry.isEnabled() && StringUtils.isNotBlank(registry.getEncryption().getKey()) && StringUtils.isNotBlank(registry.getSigning().getKey()),
              () -> {
                  LOGGER.warn("Ticket registry encryption/signing for [{}] is not enabled explicitly in the configuration, yet signing/encryption keys "
                      + "are defined for ticket operations. CAS will proceed to enable the ticket registry encryption/signing functionality. "
                      + "If you intend to turn off this behavior, consider removing/disabling the signing/encryption keys defined in settings", registryName);
                  return Boolean.TRUE;
              },
              registry::isEnabled
          ).get();
  
  
          if (enabled || forceIfBlankKeys) {
              LOGGER.debug("Ticket registry encryption/signing is enabled for [{}]", registryName);
              return new DefaultTicketCipherExecutor(
                  registry.getEncryption().getKey(),
                  registry.getSigning().getKey(),
                  registry.getAlg(),
                  registry.getSigning().getKeySize(),
                  registry.getEncryption().getKeySize(),
                  registryName);
          }
          LOGGER.info("Ticket registry encryption/signing is turned off. This MAY NOT be safe in a clustered production environment. "
              + "Consider using other choices to handle encryption, signing and verification of "
              + "ticket registry tickets, and verify the chosen ticket registry does support this behavior.");
          return CipherExecutor.noOp();
      }
docs: New ticket registry cipher executor cipher executor.
  
  @param registry         the registry
  @param forceIfBlankKeys the force if blank keys
  @param registryName     the registry name
  @return the cipher executor