A service to assist with the generating and decrypting of data keys, backed by either AWS KMS or AWS CloudHSM v2