Hello

we are designing a solution where users will have their own wallets where their keys will be used for encrypting and signing content.

our concerns are that all wallets are stored on the server which runs the fabric-sdk file system and can be accessed by an administrator or hacker 

what are the best practice to mange and secure users wallets. Some articles suggest HSM and others suggest re-enrollment on every transaction/session.