Currently private identities (private key components) are stored in the data base as plain data. That's no real security at all. Add a symetric crypto step that uses a password + salt to encrypt the key components.