code: func EncryptPEMBlock(data, password []byte) (*pem.Block, error) {
  	encryptedBytes, err := encryptPrivateKey(data, password)
  	if err != nil {
  		return nil, err
  	}
  
  	return &pem.Block{
  		Type:    "ENCRYPTED PRIVATE KEY",
  		Headers: map[string]string{},
  		Bytes:   encryptedBytes,
  	}, nil
  }
docs: // EncryptPEMBlock takes DER-format bytes and password to return an encrypted PKCS#8 PEM-block