There is a command group 'az_keyvault_key'. This group of commands could 'manage keys'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_keyvault_key_download'.The syntax is: az keyvault key download --file
                         [--encoding {der, pem}]
                         [--hsm-name]
                         [--id]
                         [--name]
                         [--vault-name]
                         [--version]. The 1th example of the child command would be to use it to 'save the key with pem encoding', the syntax is: az keyvault key download --vault-name MyKeyVault -n MyKey -e PEM -f mykey.pem. The 2th example of the child command would be to use it to 'save the key with der encoding', the syntax is: az keyvault key download --vault-name MyKeyVault -n MyKey -e DER -f mykey.der. The parameter '--file -f' is required. It is used to file to receive the key contents.. The parameter '--encoding -e' is optional. encoding of the key, default: pem.. The parameter '--hsm-name' is optional. name of the hsm. (--hsm-name and --vault-name are mutually exclusive, please specify just one of them).. The parameter '--id' is optional. id of the key. if specified all other 'id' arguments should be omitted.. The parameter '--name -n' is optional. name of the key. required if --id is not specified.. The parameter '--vault-name' is optional. name of the vault.. The parameter '--version -v' is optional. the key version. if omitted, uses the latest version.. 