Biometric key is stored in Windows Credential Manager, accessible to other local unprivileged processes