IS KMS PICO RISK-FREE TO WORK WITH? COMPREHENDING THE SECURITY PITFALLS