[security-area] XKMS next steps