1. A device comprises: a key store memory operable to store a plurality of cryptographic keys; a rule set memory operable to store a set of rules for accessing at least some of the plurality of cryptographic keys; a plurality of cryptographic clients, wherein a cryptographic client of the plurality of cryptographic clients is operable to: issue a request to access a cryptographic key of the cryptographic keys; and when access to the cryptographic key is granted, execute a cryptographic function regarding at least a portion of the cryptographic key to produce a cryptographic result; and a key store arbitration module operable to: interpret the request for access to the cryptographic key to produce an interpreted request; access the rule set memory based on the interpreted request to retrieve a rule of the set of rules; and grant access to the cryptographic key in accordance with the rule.