Is it possible to have dataset properties that are managed using the dsl_prop_set() / dsl_prop_get() interfaces that aren't made available via zfs(1), in fact I probably don't want them in userland at all.
Specifically I'm wondering if I can use dsl_prop_set() to store the wrapped encryption key for a dataset. I don't want that wrapped key being available via zfs(1) as a property, or available to any unprivileged userland application via libzfs. -- Darren J Moffat