[dllthomas]

No, I was thinking the latter, but the data should in that case be encrypted with the public key, which can be copied to the web-facing servers.