Entity ensures that cryptographic keys are rotated, suspended or destroyed as per the encryption policy