in reply to OT: Storing encryption keys securely
Store it in a different database than the one that stores the passwords. Keep the two databases on different hosts.
Can't you wrap the database serving the key into a service that asks for a passphrase on startup?
($q=q:Sq=~/;[c](.)(.)/;chr(-||-|5+lengthSq)`"S|oS2"`map{chr |+ord }map{substrSq`S_+|`|}3E|-|`7**2-3:)=~y+S|`+$1,++print+eval$q,q,a,
In Section
Seekers of Perl Wisdom