Keys that haven't been escrowed yet are now stored in /private/var/root