``My point is they may have been entrusted with secure content but it is unclear if it was being loaded onto Peas.``
Makes no difference where the content goes after decryption..PEA...storage device...server....where ever...
My point is...all information indicates that the TDL decrypts the content for other devices...the files are vulnerable at that point.
doni
