protect keys stored in DB used to lookup tokens