Managing CMKs in a Custom Key Store