@java.lang.Override
      public Builder mergeFrom(
          com.google.protobuf.CodedInputStream input,
          com.google.protobuf.ExtensionRegistryLite extensionRegistry)
          throws java.io.IOException {
        if (extensionRegistry == null) {
          throw new java.lang.NullPointerException();
        }
        try {
          boolean done = false;
          while (!done) {
            int tag = input.readTag();
            switch (tag) {
              case 0:
                done = true;
                break;
              case 10:
                {
                  kmsKey_ = input.readStringRequireUtf8();
                  bitField0_ |= 0x00000001;
                  break;
                } // case 10
              case 18:
                {
                  kmsKeyServiceAccount_ = input.readStringRequireUtf8();
                  bitField0_ |= 0x00000002;
                  break;
                } // case 18
              default:
                {
                  if (!super.parseUnknownField(input, extensionRegistry, tag)) {
                    done = true; // was an endgroup tag
                  }
                  break;
                } // default:
            } // switch (tag)
          } // while (!done)
        } catch (com.google.protobuf.InvalidProtocolBufferException e) {
          throw e.unwrapIOException();
        } finally {
          onChanged();
        } // finally
        return this;
      }
<pre>
A customer-managed encryption key (CMEK) for the Compute Engine
resources of the associated workstation configuration. Specify the name of
your Cloud KMS encryption key and the default service account.
We recommend that you use a separate service account and follow
[Cloud KMS best
practices](https://cloud.google.com/kms/docs/separation-of-duties).
</pre>

Protobuf type {@code google.cloud.workstations.v1.WorkstationConfig.CustomerEncryptionKey}
java-workstations/proto-google-cloud-workstations-v1/src/main/java/com/google/cloud/workstations/v1/WorkstationConfig.java