Since this was just work-in-progress, I had forgotten to include license header text.
When not needed, encrypt the keys in-memory with a large pre-key so that forensic acquisition of data using coldboot becomes infeasible. Not used yet internally.