Locking decryption to avoid concurrent use, cloning encrypted private key before decryption to avoid overwrite.