The existing key id, or null if the provider does not have it. Never creates a key: this is called for storage that is already encrypted with id.
null