I have a Private Key that is regularly used to decode incoming files during off-business hours as part of an automated process. Currently, it is stored in the application code itself, and only ever used for this process - but this is probably not a good idea, even though our application is internal-facing only.  Where should we store our private key so that it cannot be abused, but can still be used regularly to decode incoming documents?  
Where should I put my key?
encryption