secret-keeper-cloudkms is used at run time in 1 crate (of which 1 optionally).

Depender secret-keeper-cloudkms version
encrypt-rs optional ^0.3.6