If you care about security then just use an HSM, they aren't that expensive, and eliminate the possibility of a database dump.