As long as the master key stays local and is hashed/salted before being sent to BW, you have nothing to worry about. You can verify this yourself.