Threat models that fit on paper
A one-page model the on-call engineer can hold is worth more than a 90-page appendix nobody opens.
Practice
Security
Threat models on paper, keys in the building, boring on purpose.
Keys that stay in the building
Orbit Mail asked where the private keys live. The answer is a room, a cabinet, and a log.