if a agent has the keys in the same process, it can easily extract them