KMS activation best practices