Add hsm_key state DELETE to mark hsm keys deleted/deleting/should be deleted.