secret-keeper-cloudkms is used at run time in 1 crate.

Depender secret-keeper-cloudkms version
encrypt-rs optional ^0.3.6