Owner only. The key is read from the server's filesystem, not uploaded —
so the mapping never passes through a browser someone might be standing at. Make a kit
with drop.py kit --a <drop> --b <drop>; it writes the blind
slotNN-A/B.dst files, an operator sheet, a pre-registration stub and the
sealed key.