allowing pre-generated AES key in sparse config