When specified, enables or updates server-side encryption using an AWS KMS key for a specified stream.