FW encrypted upgrade using MCUBoot and KMU stored private key for decryption

I want to enable in nrf Connect SDK for nrf54L MCU FW image encryption for upgrade. In the project we use NSIB B0 bootloader plus MCUBoot with ability to upgrade MCUBoot and application FW (2 flash slots principle). I need to store private key in KMU and MCUBoot should use it for image decryption (we don't embedded private key for decryption into MCUBoot due to the ability to upgrade it. Because during upgrade this key could be sniffed). Image verification is already enabled and the public key for verification is a part of MCUBoot image. We also use KMU to store three public keys for NSIB to verify MCUBoot upgrade. I didn't found such an option in SDK 3.2.2 for MCUBoot to use KMU private key for app FW image decryption. Is this feature supported? If no, do you have a roadmap for this feature or any recommendation what should we do to not to expose our FW internals?

Related