AKS on AzureLocal: KMSv1 -> KMSv2

Hey, quick question on AKS Arc — we're running moc-kms-plugin:0.2.172-official on an Arc-enabled AKS cluster on Azure Local and currently have KMSv1=true as a feature gate to keep encryption at rest working.

KMSv1 is deprecated in 1.28+ and we want to migrate to KMSv2 before it gets removed. Since moc-kms-plugin is a Microsoft-managed component we can't just swap it out ourselves.

A few questions:

• Does version 0.2.172 already support the KMSv2 gRPC API, or is that coming in a later release?
• Is there a supported migration path for AKS Arc specifically, or does this come automatically through a platform update?
• Any docs or internal guidance you can point us to?

Thanks!