1. A method comprising: receiving, by at least one processing device, a request to access a header of a secured file, wherein the header comprises a file key, at least the header of the secured file is configured to be decrypted by a user key, and a data portion of the secured file is configured to be decrypted by the file key; obtaining, by the at least one processing device, the user key from a particular storage location that indicates a level of security of the user key, wherein the level of security is defined in a policy based on a degree of access privileges provided by the user key and a requirement that the user key be obtained from the particular storage location based on the level of security of the user key; and decrypting, by at the least one processing device, the header using the user key to produce the file key.