SET TAG 'tag' FOR 'key_id' IDENTIFIED BY keystore_password
  [ WITH BACKUP [ USING 'backup_identifier' ] ]