Query: ibm_kms_key_dual_auth_status

select
  case
    when dual_auth_delete ->> 'enabled' = 'true' then 'enabled'
    else 'disabled'
  end as status,
  count(*)
from
  ibm_kms_key
where
  state <> '5'
group by
  status;