Yes, but I'm not sure about the passphrase. Not sure you can provide the passphrase as an argument. So far I've always used gpg keys with not passphrase for automation.

If using GPG, I believe you don't have anything to do.The key is referenced in the encrypted files so GPG would known which one to use (see https://superuser.com/questions/920793/how-to-specify-private-key-when-decrypting-a-file-using-gnupg)Just make sure both keys are available on the Campaign serv...

Set the attribute district to "true".<queryDef schema="stf:student" operation="select" distinct="true">