refactor to move things into TSKeyManager. next stop moving DB methods involving key management there