* docs: add KMS section to controller configuration overview * docs: add config encrypt|decrypt KMS configuration guide