also ensure to initialize kms before the dataprovider, it could be needed to downgrade secret from cloud kms providers
Fixes #233