What is the biggest concern with hosting a key management system outside of the cloud environment?