Is it a good idea to provide a default value for the key? Shouldn't the key be unique and "strong"? If it should be and we are providing a default, then we are making it super easy for LB users to introduce a security hole in their app.