Encrypt clusters using self-managed keys