The text e91e8d06eb4c, as Debian 11 (Bullseye) shipped it.
API function
gnutls_pkcs12_bag_encrypt(3) on Linux now