reason

The reason for the capability failure. Possible values: KMS_KEY_INSUFFICIENT_PERMISSION.