the process by which keys are managed by a third party