How to deploy API with Mule Security Vault with runtime masterkey on CloudHub?

Hi guys, I'm trying to deploy my API (which has a security vault) in cloudhub but every time I tried to deploy it throws and error saying that it doesn't recognize the property key to decrypt, and that is because I need to pass it through the command line (runtime value) and I don't know how to do it in cloudhub. I would like to know the correct procedure to deploy an API in cloudhub with security vault.

Another question I have is when to use -M and -D prefixes when executing my API through command line. When I deploy it on a local server I need to use -M-Druntime.masterkey=key but in Anypoint studio I need to use -Druntime.masterkey=key to make it work. I would like to know the function of each prefix.

Thank you in advance.