The key administrator must decide where keys are stored, when they should be renewed, and which table owners can use a given key to encrypt columns in their tables.
