Should the storage provider provide support for encryption on their end? Would you not want to store the keys locally?