Specifies the KMS key ARN the stream will use to encrypt data. If not set, no encryption will be used.