GUARANTEEING AUTHENTICITY: HOW KMS PICO VERIFICATION OPERATES