Consumers should not have access to private keys

The documentation refers to producers using public keys to encrypt data and consumers using private keys to decrypt data. This is backwards to how PKI normally works where private keys are used to encrypt and public keys are used to decrypt. Private keys are usually never disseminated (hence private). Public keys ARE shared in order to decrypt data from the private key holder.

In Pulsar docs this role reversal is confusing and apparently not the norm.

Locate the Pulsar documentation passages describing producers, consumers, and public/private key use. First verify the key roles and encryption/decryption wording against the issue's PKI concern. Done means the documentation clearly and accurately explains which keys are shared and which must remain private.

Written by the indexing model from the issue text.