If I understood it well, the main security concerns are moved to the KMS, that you must refer is not susceptible to the same kind of attacks that they describe (untrusted environments, potentially with unknown database administrators, server administrators, OS and hypervisors). I have not a vast experience with KMSs, what would be your approach to deploy one you can trust in a cloud environment, deploying it on bare metal?