Upstream key safety: when you create a scoped key, the upstream key is encrypted into the scoped token itself. It is not stored in the Till database.