Were you using some awesome new cryptographically secure method to manage the passphrases of the newly generated keys (and communicate them to the user)? Or, m

Were you using some awesome new cryptographically secure method to manage the passphrases of the newly generated keys (and communicate them to the user)? Or, more likely, were all of these new private keys granting access to all of your hosts just sitting there on disk unencrypted -- and, as a result, freely available to and easily stolen and used to gain access to all of your production machines by the first attacker to come along and compromise the bastion host?