How-to

# encrypt .env with paspaspaps password, '' should given if there is a custom char
# like !@#$ and friends
cat .env | openssl enc -a -A -aes-256-cbc -salt -pbkdf2 -pass pass:'paspaspaps' | tee mybin | openssl enc -aes-256-cbc -pbkdf2 -d -a -A
# one line base64 password is in mybin file
# last part of the command will check the encryption is OK or NOK

# dunno it is persistent or not, but script seems to configure it every time ...
sudo nmcli connection modify Nokia ipv4.dns-search cci.nokia.net,int.net.nokia.com,nsn-rdnet.net
curl -v https://infra.fi-646.vlab.nsn-rdnet.net:8443