A governance model emphasizing customer-operated policy and lifecycle control over key generation, usage, and revocation.