Encryption by the machine key cannot be added to the service master key because the service master key cannot be decrypted ...