IS KMS PICO HARMLESS? EXAMINING SECURITY CONSIDERATIONS AND CHALLENGES