CPM supports custom encryption keys for DR