Attached patch 1 to add documentation. The usage part is copied from the command usage directly (found a typo there, corrected), adapting to the markdown format. Also attached a generated html for easier reviewing.
The reason that
HDFS-9784 saw the exception is due to a KeyProvider's precondition check.
Please see if the document makes sense. Thank you!