Comment by erkkie

You don't ship HSM's with keys (you initialise them on-device yourself) nor can you read read keys out from one (at least in theory).