Once a key is loaded and confirmed as working, its components are destroyed, except for the master file keys of an HSM or KLD, and except where the HSM keeps only subordinate keys internally and no encrypted values are held in a database; BDK components may be retained in a KLD where they are needed for reloading.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.