Google: BigQuery and GCE users get these new controls over sensitive cloud data

Don't or can't trust Google with the encryption keys to your sensitive data? Now you can store the keys completely outside Google's infrastructure.