Enterprise key governance for data encryption