Using Self-Defending KMS for MySQL Encryption at Rest