CUSTOMER-SUPPLIED ENCRYPTION KEYS