Our secstore server is still using a kfs, mostly because I've been too lazy
to switch it over.  It doesn't use a file server because the database is
open to dictionary attack even though the protocol isn't.