How do certification authorities store their private root keys? http://t.co/SB83pgVV