IS KMS PICO LAWFUL? COMPREHENDING THE GRAY REGIONS OF APPLICATION ACTIVATION