even letters to and from outsiders get stored in the citadel under zero-access encryption, meaning the postman stores envelopes it cannot open. private keys are themselves encrypted under the users account password, in a form the keeper cannot reach. storage is not reading. a warehouse of sealed boxes is not a library