Bringing post-quantum cryptography to geographically fenced key management