Except for the todo part, this is the mechanism by which StackConfiguration will load the encrypted keys from S3.