IS KMS PICO HARMLESS? INSPECTING SECURITY CONCERNS AND THREATS