Ideally they are all in nsecbunkers that you're normal private key have access to