src/security/kms/meta/key_manager.cmx

{
    "program": {
        "binary": "bin/kms"
    },
    "sandbox": {
        "features": [
            "config-data",
            "isolated-persistent-storage"
        ],
        "services": [
            "fuchsia.tee.Device"
        ]
    }
}