Consider [private signing key; certificate-chain intermediate; private decryption key; public encryption key; refresh token; session cookie]. Select all entries that are credentials or key material designed for public distribution.