For every decryption and encryption of DEK in the vault a call is made to kms. Can we reduce it somehow by caching the CMK or plain DEK in inmemory cache?