Would there by any security added to a web application by putting the encryption keys into a Zephir extension? Instead of needing to read the encryption key from a file (which may accidentally be leaked or stolen), the keys would be available only through the extension. Or is this just security through obscurity without any real benefit?