security: local_key mode stores master key unprotected on disk — upgrade default to keyring or add key wrapping