Currently, there's a policy for encryption in transit. But I didn't find any working method to provide a AWS or KMS key to be used to encrypt the data at rest in the Queue. Do I miss something here?