A machine running a KMS activator is, by definition, a compromised machine from a security compliance standpoint.