填空题 21.  The ______ defines the encapsulation and cryptographic settings that will be distributed to the group members by the key server as part of the SA. ______定义了封装及加密的策略，并且这些策略将被密钥服务器分发给组成员作为安全关联(SA)的一部分。