depends on how many machines you have.  If secstored is running on a different
machine, then factotum will call it up when it starts and download the
keys.  Otherwise, you can start secstore some time later and redirect its
output to the factotum/ctl.