A mechanism that automatically unseals a protected secret store using an external trusted key provider at startup.