Swiss public-sector data protection officers say controlling the geographic location of cloud data isn’t enough: governments must hold the encryption keys too.