Ask HN: What's the best way to store company private keys?
I'm looking at Terraform's vault, but what I'd love to know what's the standard way to keep company keys secure?
* HSM https://en.wikipedia.org/wiki/Hardware_security_module
* Handwritten base64 sheets of paper in different vaults
* a USB token (Yubikey, or whatnot)