>>338134541
There are things that can make it harder; encryption when cached for example, but the key is gonna be in memory. having a per asset key that is obfuscated in memory and only pulled from remote over an ssl connectuon would make it difficult enough for no-one to bother though