Which can (and should) be stored in a way that requires a password to access (ssh supports this, as do most other certificate systems).