) {
        def allArgs = tasks + getEncryptionOptions(kind) + additionalArgs + ["-s"]
        // envVars overrides encryption env vars
        def allVars = getEncryptionEnvVars(kind) + envVars
        executer.withEnvironmentVars(allVars)
        runner(*allArgs)
    }

    private List<String> getEncryptionOptions(EncryptionKind kind = EncryptionKind.KEYSTORE) {
        switch (kind) {