Single-user mode# If you invoke postgres in single-user mode with TDE enabled, the postgres command reads either: The PGDATAKEYUNWRAPCMD environment variable, if set The data_encryption_key_unwrap_command value in the postgresql.conf file