This carries the pre-encrypted form of the shared secret used for 802.1X accounting, and reading it back returns the encrypted value rather than the plaintext secret. As with its authentication-table counterpart, this lets configuration backups move the accounting secret between devices without exposing it in plaintext, but it can't be used to confirm the secret text matches what was intended. For example, a disaster-recovery replacement switch could be provisioned by pushing this encrypted value directly from a saved configuration rather than re-typing the accounting server's shared secret by hand.