Is a keytab file encrypted?

[pratyush parimal]

Hi guys,

Kind of a noob question, but here it goes.
When I export a principal's key to a keytab file using the following
command:

ktadd -k keytabfile service/host at REALM

(1) Does the keytabfile contain the key in encrypted form or as plaintext?
(2) Is it possible to export the key in encrypted form? If so, then how
does the service application open the encrypted keytab?

Thanks,
Pratyush