Where do you keep the private keys then?
Do you pull out deposing addresses for users from file? What is the file get replaced on the server then?