<class> – Element specifying the class defining the keychain file. If a class is not specified, com.terracotta.management.keychain.FileStoreKeyChain is used.

<url> – The URI for the keychain file. It is passed to the keychain class to specify the keychain file.

<secret-provider> – The fully qualified class name of the user implementation of com.terracotta.management.security.SecretProviderBackEnd. This class can read and provide the keychain file.