* use secure memory
* implement locking for key i/o
* ...