Which statement is true about MySQL Enterprise Transparent Data Encryption (TDE)?

https://www.mysql.com/products/enterprise/tde.html#:~:text=MySQL%20Enterprise%20Transparent%20Data%20Encryption%20(TDE)%20protects%20your%20critical%20data,Data%20Security%20Standard%20(PCI%20DSS)

InnoDB uses a two-tier encryption key architecture, consisting of a master encryption key and tablespace keys. When a tablespace is encrypted, a tablespace key is encrypted and stored in the tablespace header. When an application or authenticated user wants to access encrypted tablespace data, InnoDB uses a master encryption key to decrypt the tablespace key. The decrypted version of a tablespace key never changes, but the master encryption key can be changed as required. This action is referred to as master key rotation.