some brainstorming about key management