Using CMKs in a Custom Key Store