The System Security Officer grants permission to create encryption keys.
grant create encryption key to user | role| group
