Well, we actually atm keep it in memory so that we can handle a container.Restart() operation and use the same private files. Thats somewhat similar to keeping it in hostconfig, but its also not as we don't keep it after a container exits.