The same key is not used in both cases. The whole path in the automatic case must be protected. Since the key may be requested from the Helpdesk, the Helpdesk should not have complete knowledge of a single key for one store and the keys should be different across different stores. Please review this page for additional discussion about this topic.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.