Allow only the conduit user to access its database files, and make sure to create all new files with 0600 (o+rw).
trusted_key_servers[].verify_keys