[chrishajer]

That seems bad that an admin could change the keymaster password. I guess you would be trusting the people you make admin, so it’s mostly a trust issue. But I like your solution as well.