Encryption configuration for a bucket.
A Cloud KMS key that will be used to encrypt objects inserted into this bucket, if no encryption method is specified.