You have a 2GB Base64 binary large object (blob) that needs to be encrypted. Which of the following best describes the transit secrets engine?

While Transit can manage data keys, directly encrypting a 2GB blob locally using a key from Transit wouldn't address the Transit engine's limitation regarding processing large data in its own memory.

Vault does not temporarily store large blobs in its storage backend for Transit operations; all data for encryption/decryption by Transit is processed in memory.

Vault is not designed to permanently store encrypted blobs of this size, and simply running Vault on a compute-optimized machine would not bypass the fundamental in-memory processing limitation for large data in Transit.

The Transit secrets engine is designed to operate on small to medium-sized data that can be processed efficiently in memory, making it generally unsuitable for directly encrypting large files like a 2GB blob due to memory and performance constraints.