The MS doc doesn\'t state if using ProtectKeysWithCertificate like this:
ProtectKeysWithCertificate
services.AddDataProtection() .PersistKeysToFileSystem(new DirectoryI