[rtev]

It’s supposedly only accessible to LocalSystem. If they were to encrypt it, it could just be decrypted anyway. Still, it’s a huge liability and a major blunder by Microsoft.

[tsujamin]

Wonder if they could enclave it similar to Cred Guard