The KMS key that is used to encrypt the function's environment variables. This key is only returned if you've configured a customer managed customer managed key.