HADOOP-11341. KMS support for whitelist key ACLs. Contributed by Arun Suresh.