Encryption at rest in Elastic Cloud: Bring your own key with AWS KMS