A managed API model for encryption, decryption, signing, and key management without direct key material handling by apps.