https://www.securityprivacyrisk.com/google-cloud-features-byo-encryption-keys/