A key used to encrypt and protect other keys, separating data encryption workloads from key protection hierarchy.