Keycard hardware security is compliant with the most stringent standard (Common Criteria EAL5+) . No one will be able to access private keys even if the card is stolen.