Using Self-Defending KMS for MariaDB Encryption at Rest