clarify that the key is stored in an encrypted form