Encrypting seed drives for offsite storage with private keys