As a 20 person startup we have a KMS with only two authorized users. Seems like SolarWinds tried pretty hard to be hacked.