There is a command group 'az_keyvault_key'. This group of commands could 'manage keys'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_keyvault_key_encrypt'.The syntax is: az keyvault key encrypt --algorithm {a128cbc, a128cbcpad, a128gcm, a192cbc, a192cbcpad, a192gcm, a256cbc, a256cbcpad, a256gcm, rsa-oaep, rsa-oaep-256, rsa1_5}
                        --value
                        [--aad]
                        [--data-type {base64, plaintext}]
                        [--hsm-name]
                        [--id]
                        [--iv]
                        [--name]
                        [--vault-name]
                        [--version]. The 1th example of the child command would be to use it to 'encrypt value base64 encoded string  with vault s key using rsa oaep', the syntax is: az keyvault key encrypt --name mykey --vault-name myvault --algorithm RSA-OAEP --value "YWJjZGVm" --data-type base64. The 2th example of the child command would be to use it to 'encrypt value plaintext  with mhsm s key using aes gcm', the syntax is: az keyvault key encrypt --name mykey --hsm-name myhsm --algorithm A256GCM --value "this is plaintext" --data-type plaintext --aad "101112131415161718191a1b1c1d1e1f". The parameter '--algorithm -a' is required. It is used to algorithm identifier.. The parameter '--value' is required. It is used to the value to be encrypted. default data type is base64 encoded string.. The parameter '--aad' is optional. optional data that is authenticated but not encrypted. for use with aes-gcm encryption.. The parameter '--data-type' is optional. the type of the original data.. The parameter '--hsm-name' is optional. name of the hsm. (--hsm-name and --vault-name are mutually exclusive, please specify just one of them).. The parameter '--id' is optional. id of the key. if specified all other 'id' arguments should be omitted.. The parameter '--iv' is optional. initialization vector. required for only aes-cbc(pad) encryption.. The parameter '--name -n' is optional. name of the key. required if --id is not specified.. The parameter '--vault-name' is optional. name of the vault.. The parameter '--version -v' is optional. the key version. if omitted, uses the latest version.. 