i.e. swapping ``-aes-256-cbc`` to ``-aes-256-gcm``
i.e. swapping
-aes-256-cbcto-aes-256-gcm