that's a good point, but I am not concerned about that yet. I'm mostly thinking of having the private keys as secure as possible in our production system. Software tools only go so far in protecting the (private) keys. I want to ensure that even if an attacker gains entry into our systems that I can be reasonably sure that the time it would take to get to our keys is enough time for us to shut down the platform / take action