For every KMS/TPM we would want to support, a platform specific plugin will need to be run. Do we want to manage it via our operators, or should we leave that to the customers?

For this spike, it would be great to have a list of the benefits and disadvantages of managing it ourselves compared to leaving it to the customer.

FWIW, HyperShift is managing the plugins for the customers.