3a) How do you balance the concerns of key reputation vs. key longevity? How do you protect the identity of the underlying Civil Servants but still include accountability and the right granularity of audit trail?