Defense in depth can also be used to solve the problem of protecting cryptographic authentication information (usually called a key) from people who break into your machine.

Whenever there are no other clients on the same machine the Dispatcher Password should be leveraged to prevent establishing cryptographic information.

In a central location, create a backup of the old machine, the ca cryptographic keys, and database.