we should log what crypt-bde does to disk in a way that config management tools can read (json/xml?)
we should log what crypt-bde does to disk in a way that config management tools can read (json/xml?)