Five legs in tests/lo-password.test.ts, driven through the repo's first UNO helper because --convert-to cannot pass a password; self-skips without soffice or python3-uno and runs with npm run test:lo. The probed format details live in docs/architecture/encryption.md.