src/sys/stash/meta/stash_secure.cmx

{
    "include": [
        "syslog/client.shard.cmx"
    ],
    "program": {
        "args": [
            "--secure",
            "--backing_file",
            "/data/stash_secure.store"
        ],
        "binary": "bin/stash"
    },
    "sandbox": {
        "features": [
            "isolated-persistent-storage"
        ]
    }
}