Without being familiar should secure keys be available in the repo? In other words: is that at all secure?