[tptacek]

Part of the point of Keyczar (note the name) is to make the right decisions about key management in advance and abstract them away from developers.