Yep. And this also means there are a lot of other security issues to consider, like where to actually store it, but still have it accessible if needed.