The other option is to keep them safe in lockers.

The objective is if the key secret has been tampered with then physically we should know, as a tamper seal.