Using Self-Defending KMS with Google Cloud EKM Interface