An earlier version of the provider implementation accepted key_material_file instead of key_material. This was updated in the resource-specific docs but not in this provider-wide example.