It is that trivial. The problem is vendor lock-in and no common, defined way to export/import them securely (which is going to change soon).