HSMs make your storage more secure, but don’t really solve the problem of people having to have access to stuff. You can address those issues, but not fully, an

HSMs make your storage more secure, but don’t really solve the problem of people having to have access to stuff. You can address those issues, but not fully, and it’s much more difficult. I’ve worked in a number of banks where my admin accounts have given me access to things like SWIFT credentials [0]. I’ve always hated having access to stuff like that, but when you start trying to figure out how to fix it you realize that no matter what you do you’re always going to have important assets protected by secrets, and people are always going to have to have some level of interaction with those secrets. [0]: https://en.m.wikipedia.org/wiki/Bangladesh_Bank_robbery https://en.m.wikipedia.org/wiki/Bangladesh_Bank_robbery