"The potential downfall of automatic key management is that it allows every sysadmin to decrypt the DMK."

This is a significant weakness because the weakest link of the security infrastructure is...