I'm starting using it as an encryption-as-a-service. Nice and good to add layers of complexity and have to avoid stuff that generally people ignore (algorithms

I'm starting using it as an encryption-as-a-service. Nice and good to add layers of complexity and have to avoid stuff that generally people ignore (algorithms, rotation, master keys etc), documentation is scattered around and not always to the point, but with a bit of time you get what is needed. Still fighting with setting up with wrap/unwrapping roles and tokens. In the end it's a tool and you have to build stuff around it. Anyway, so far so good. If you have to encrypt/decrypt things I would suggest you to give it a try.