KeyState: "unknown_state" | "enabled" | "disabled" | "pending_key_material"