Class(sec:_EncryptionKey complete restriction(sec:hasAsset allValuesFrom(sec:EncryptionKey)) sec:HasAsset)