you have to encrypt the keys
the db is stored as a regular file - i was able to read the private key with notepad from outside the browser