See also https://news.ycombinator.com/item?id=13375535. I work on Cloud KMS, happy to answer questions.