Recovery (disk-mapper) and init (bootstrapper) will have to work with multiple external KMSes in the future.