You could theoretically set up multiple competing government agencies, each with their own root key. That would deal even with organisational risk.