1. A non-transitory computer-readable medium embodying a program executable in at least one computing device, comprising: code that imports double encrypted secret material received from a customer client device into a trusted execution environment, the double encrypted secret material being encrypted by public provider and vendor keys; code that extracts, by the trusted execution environment, vendor encrypted secret material from the double encrypted secret material by decrypting the double encrypted secret material with a private provider key; code that extracts, by the trusted execution environment, secret material from the vendor encrypted secret material by decrypting the vendor encrypted secret material with a private vendor key; code that stores the secret material within the trusted execution environment; code that receives an instruction to perform a cryptographic operation and an identifier of the secret material from the customer client device; and code that performs, by the trusted execution environment, the cryptographic operation using the secret material based in part on the identifier of the secret material.