if an encryption key is compromised, it must be replaced. if few people know the key, then replacing it is easier than if a large number of people know the key. which design principle is this an example of?