This didn't really answer my question though. There's other software besides key management services that run on those nodes. How is that being managed if these

This didn't really answer my question though. There's other software besides key management services that run on those nodes. How is that being managed if these orgs are not doing some form of Devops?