Plug-ins are stored as executables with the same name as the plug-in name in the directory specified in the tde_kms.plugin.path parameter. It is the responsibility of the database administrator to ensure that only secure plugins are stored in this directory.