In a key-injection facility the creation or cloning of any key for backup needs at least two authorised people, and every requirement for the original keys applies to the backups and their components.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.