IS KMS PICO HARMLESS TO IMPLEMENT? COMPREHENDING THE SECURITY PITFALLS