Ockam and Microchip make it simple to keep cryptogrpahic keys safe outside of the cloud.
Private keys are generated inside the chip.
Private keys never leave the chip and are partitioned from application processes.
Ockam brings key management into your applicaiton layer. We've already done the nitty-gritty of embedded scurity engineering.