Why can't we just randomly generate the key? I assume we are turning over drives to instances without passwords (fresh after a secure erase, rather).