I had the same reaction.<p>Looking at the docs, it looks like the master key source is pluggable, so you don&#x27;t have to use Amazon&#x27;s KMS... but none of the other options inspire confidence (local file, fetch from URL, plaintext password, or no password).<p>At the very least, I&#x27;d like to see a plugin for using a key stored on a local TPM chip -- which almost any modern bare-metal server would be equipped with.