I'm surprised this wasn't covered in the blog or FAQ. Seems like an important detail that security-minded customers would care about.