Key management is the hardest part of cryptography, so I wrote up a small survey on approaches: goblinoats.com/notes/on-keys