We keep user keys in LDAP. LDAP is mainly read-only having many many replicas is pretty easy. This is by far the most elegant solution we've determined and all

We keep user keys in LDAP. LDAP is mainly read-only having many many replicas is pretty easy. This is by far the most elegant solution we've determined and allows for instant revoking of user accounts.