Scenario: You are part of the data governance team and need to implement security requirements. You must encrypt all data in BigQuery using an encryption key managed by your team. The mechanism to generate and store the encryption material must only use your on-premises hardware security module (HSM). You want to use Google-managed solutions. Question: What should you do to meet the requirements?