Allow refresh of lower environment from production when using a HSM
A method we found to be viable was to convert production to use the HSM and then clone the partition containing the key for production to development.  This needs to be repeated with each clone of the database and then a post clone step can modify the key for the lower environment using normal key change processes.