Symmetric key is stored locally with weak encryption.
vulners.com/securityvulns/securityvulns:doc:29545