"When system 120 is offline, SM 420 provides secure storage to each trusted application, identified by its digest or public key, for keys and other secret data received from the distributor." . . . .