Best practices for key management include all of the following, except:

A. Ensure multifactor authentication
B. Pass keys out of band
C. Have key recovery processes
D. Maintain key security