Controls whether keys generated by the hardware-backed key factories are backed by a dedicated secure hardware element.