You can specify your own password for the keystore. If you do this, they can't access the keys (well, outside of nefarious sniffing we'll assume for the moment they aren't doing). You also can't access your data if you forget it.