Use the Data Protection API to protect the users private keys.