mc encrypt set sse-s3 myminio/bucket/
```

Verify if MinIO has `sse-s3` enabled

```
mc encrypt info myminio/bucket/
Auto encryption 'sse-s3' is enabled
```

### Using environment (not-recommended)

MinIO automatically encrypts all objects on buckets if KMS is successfully configured and following ENV is enabled:

```
export MINIO_KMS_AUTO_ENCRYPTION=on
```

### Verify auto-encryption

        assertTrue(output.contains("00000:"));
        assertTrue(output.contains("00010:")); // Second line offset

        // Verify first line contains bytes 0-15
        assertTrue(output.contains(" 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F"));
        // Verify second line contains bytes 16-31
        assertTrue(output.contains(" 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F"));
    }

    @Test

        assertEquals(52, aad.length); // AAD should be same size as transform header

        // Verify protocol ID (first 4 bytes) - 0xFD534D42 in little-endian
        assertEquals((byte) 0x42, aad[0]);
        assertEquals((byte) 0x4D, aad[1]);
        assertEquals((byte) 0x53, aad[2]);
        assertEquals((byte) 0xFD, aad[3]);

        // Verify signature is zeroed out (16 bytes of zeros)
        for (int i = 4; i < 20; i++) {

import static org.junit.jupiter.api.Assertions.assertTrue;
import static org.mockito.Mockito.atLeastOnce;
import static org.mockito.Mockito.never;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.when;

import java.io.IOException;
import java.net.MalformedURLException;
import java.net.URL;
import java.net.URLConnection;
import java.util.stream.Stream;

    }

    @Test
    @DisplayName("Constructor should initialize TransWaitNamedPipeResponse")
    void testConstructor() {
        // Assert
        assertNotNull(response);
        // Verify parent class is properly initialized
        assertTrue(response instanceof SmbComTransactionResponse);
    }

    @Test
    @DisplayName("writeSetupWireFormat should return 0")
    void testWriteSetupWireFormat() {

        SuggestSettings settings = builder.build(client, id);

        assertNotNull(settings);
        // Verify that the settings object was created with the correct parameters
        // Note: We can't directly verify internal state of SuggestSettings without getters,
        // but we can verify it was created successfully
    }

    @Test
    public void testBuildWithCustomSettings() {

        Thread.sleep(1100); // Wait for reset

        // First attempt transitions to HALF_OPEN
        try {
            circuitBreaker.executeWithCircuitBreaker(() -> {
                // Verify we're in HALF_OPEN
                assertEquals(State.HALF_OPEN, circuitBreaker.getState());
                throw new RuntimeException("Failure in half-open");
            });

        RequestTrace level3 = new RequestTrace(level2, "level3-data");

        // Verify the chain
        assertNull(root.parent());
        assertEquals(root, level1.parent());
        assertEquals(level1, level2.parent());
        assertEquals(level2, level3.parent());

        // Verify context inheritance
        assertEquals("root", root.context());
        assertEquals("level1", level1.context());

        // Test that exception is serializable
        String message = "Serialization test";
        LdapOperationException exception = new LdapOperationException(message);

        // Verify the exception can be created (serialVersionUID is present)
        assertNotNull(exception);
    }

    public void test_stackTrace() {
        // Test that stack trace is properly captured

        ThemeException exception = new ThemeException("Stack trace test");

        assertNotNull(exception.getStackTrace());
        assertTrue(exception.getStackTrace().length > 0);

        // Verify that this test method appears in the stack trace
        boolean foundTestMethod = false;
        for (StackTraceElement element : exception.getStackTrace()) {
            if ("test_stackTrace".equals(element.getMethodName())) {