Like its authentication-table counterpart, this expects a pre-encrypted value and returns that same encrypted value on read rather than blanking it, which the admin should remember is specific to accounting and independent of the plaintext-style cienaCesRadiusUserLoginAcctAuthKey object nearby. The two represent two different ways of supplying essentially the same kind of secret. For example, a provisioning script could safely copy this encrypted accounting secret between two identically-configured devices, the same way it could for the authentication table's equivalent object.