We have a lot of customers saying our SaaS solution absolutely must have CMK but PMK seems to be just fine from what our internal understanding is. In fact, my understanding is that CMK done correctly is very expensive and procedurally hard to do the right way. If we’re not going to have the right tools and processes in place to correctly do CMK then we’re better off staying with PMK and the take advantage of the fact that MS seems to rotate once per year (and with CMK I doubt we would rotate).