The keystone file -containing the private key- is not generated offline but must be downloaded- which is in my opinion is huge security risk. If I understand correctly, the moment someone gets your keystone file he has your private key.
Any idea how to solve that?
Thank you!