But yeah, it pretty much looks for any sort of secure credential manager and falls back to the fixed key only when nothing is available.