Key Management: HSM, KMS, Rotation & SeparationManage encryption keys securely with HSM/KMS, implement rotation, and separate keys by purpose