> Mitigation: Shamir Secret Sharing, hardware security modules, documented recovery procedures