Calling
services.AddDataProtection() .PersistKeysToAWSSystemsManager($"/MyApp/DataProtection");
results in two keys created in m