To encrypt the data during an export to an output LDIF file, run the
export-ldif tool with the --encryptLDIF
option.
The following command runs an offline export of the userRoot
backend and encrypts the file when written to an output file called
data.ldif.
$ bin/export-ldif --backendID userRoot --ldifFile /path/to/data.ldif \
--encryptLDIF