`auto_encrypt` vs. `auto_config`

Hello everyone,

from the docs (Deployment Guide and Consul Configuration Reference) it’s not really clear to me, what is happening here and what of them to choose exactly, since the two parameters seem to be mutual exclusive.

What I guess (after reading the details for auto_encrypt and auto_config in the Configuration Reference) is that auto_config does the same as auto_encrypt does plus instead of “only” getting signed client certificates, it also gets additional config elements like encryption_key and other config settings.

Is that correct or am I missing anything?