SECURE BOOT: separate functions for reading keys