1. A method comprises: for secure storage of a data access key of an originating device: encrypting, by the originating device, the data access key using secret data to produce an encrypted data access key; dispersed storage error encoding the encrypted data access key to produce a set of encoded data access key slices; sending the set of encoded data access key slices to storage nodes of a distributed storage network (DSN) for storage therein; transforming, by the originating device, the secret data to produce a plurality of secret data shares; obtaining, by the originating device, unique encryption values of trusted agent modules of the DSN; encrypting, by the originating device, the plurality of secret data shares using the unique encryption values to produce a plurality of encrypted secret data shares; and sending, by the originating device, the plurality of encrypted secret data shares to the storage nodes for storage therein; and for secure retrieval of the data access key: sending, by the originating device, a secret data retrieval request to the trusted agent modules; in response to the secret data retrieval request, recovering, by the trusted agent modules, the plurality of encrypted secret data shares from the storage nodes; decrypting, by the trusted agent modules, the plurality of encrypted secret data shares using a decryption function corresponding to the unique encryption values to recapture the plurality of secret data shares; sending, by the trusted agent modules, the plurality of secret data shares to the originating device; recovering, by the originating device, the secret data from the plurality of secret data shares; retrieving, by the originating device, at least a decode threshold number of encoded data access key slices of the set of encoded data access key slices from at least some of the storage node; recovering, by the originating device, the encrypted data access key from the at least the decode threshold number of encoded data access key slices; and decrypting, by the originating device, the encrypted data access key using the recovered secret data to recover the data access key.