IS KMS PICO RISK-FREE TO IMPLEMENT? WEIGHING IN ON USER PROTECTION AND PRIVACY