I missed this the first time around, but if we're embedding a system key in the RGWZoneParams, doesn't that imply that all the daemons accessing the zone (externally, I assume) are going to use the same key? For security we definitely want to be able to assign different keys to each daemon or data center.