Using KMS to encrypt sensitive information