In the long run we going to have 2 type of stores: encrypted one and plain one. Private key is needed only for encrypted one. Maybe we could have a sub-classAGEncryptedStoreConfig?