DECIDING ON THE CORRECT KMS PICO SUPPLY: IDENTIFYING TRUSTED VENDORS