Why trying to avoid trusting the KMS doesn’t make sense (and other common misconceptions).