Cryptographic Security Platform Vault for Databases supports MariaDB TDE as an external key provider. You can encrypt your keys using the AES-256 key cipher, and also rotate the keys, which creates a new version of the encryption key.