with the user's password right? cool. if someone wants to 'export' their private keys, or transfer them to another custodian, i'm assuming that's possible, right? (how's the security process for that like?).