How should the keys be stored? Not excusing them, but this isn't as straightforward to resolve as people think. That being said, not having any access controls

How should the keys be stored? Not excusing them, but this isn't as straightforward to resolve as people think. That being said, not having any access controls is cringe. Really?