Added PEM to lock/unlock pem keys, experimented with tests with a in-mem database