Where does this key come from and should it be public?