...
The data set referenced by the DD statement identified by
ddname must be encrypted with the
Universal Encrypt utility.
It is strongly recommended that any command data set / file containing sensitive data (including those that are encrypted) be further protected from unauthorized access using a native operating system security method, such as RACF.
...