D03c.2 High-level key manager service design specification