Specifies the intended use of the key. Valid values: ENCRYPT_DECRYPT, SIGN_VERIFY, or GENERATE_VERIFY_MAC. Defaults to ENCRYPT_DECRYPT.
ENCRYPT_DECRYPT
SIGN_VERIFY
GENERATE_VERIFY_MAC