I might be naive but how does a threat actor get access to encrypted bunch of keys.