I haven't done enough PKI to call myself "good" at it but I've done enough to shudder any time I hear "hardcoded key"