keyId

The ID of the key that sealed record. Checks magic, version, algorithm and minimum size; throws StorageEncryptionException. Does not authenticate the record.