New blogpost announcing Customer Managed keys in Pulumi ESC https://www.pulumi.com/blog/bring-your-own-keys-with-pulumi-esc/