We have a product, "keyless ssl", which is used by some customers to retain on premise custody of their asymmetric key material, actually.