The component responsible for dealing with encryption keys provided by a trusted vault server, also known as security domain server or service.