kms_encrypter
