/subsystem=elytron/key-store=ks:add(path=a.keystore,type=jks,credential-reference={clear-text=secretKeyStore}) /subsystem=elytron/key-managers=kms:add(algorithm=SunX509,alias-filter=keyAlias,key-store=ks,credential-reference={clear-text=secret}) /subsystem=elytron/key-managers=kms:read-resource /subsystem=elytron/key-managers=kms:write-attribute(name=alias-filter,value=a) reload /subsystem=elytron/key-managers=kms:read-resource