According to this study, only 54% of security professionals admit to having a written policy on length and randomness for keys for machine identities.