What I'm saying is that the user probably shouldn't have any keys at all, because they will end up losing their money to a phishing scam or something.