dominichackett / dms-hackfs2021 Goto Github PK

Hi Dominic, very interesting project. I was reviewing it and had also thought about a similar challenge. My question is, is the vault key that you retrieve via

function getVaultKey(string calldata vault,string calldata trustee) view external  returns(string memory)
{
	   require(vaults[vault].locked == false, "Vault is locked");
	   
	   return(vaults[vault].trustees[trustee].key);
}

public for everyone to see on the contract? because if so, what can prevent the trustee from browsing the contract and blocks and retrieving it before the vault is unlocked? would really appreciate if you can elaborate on this.
Thanks again