Comment by verdverm

> nobody can read them back

how are they sent to the upstream vendor?

it's bad practice to upload such important keys to new vendors, OpenCode has their certs and trust page too, they got their user keys hacked