second , if my research is correct , a fail-safe would cause any destroyed key to be reconstituted in a different form in an unpredictable location , and that process could go on almost indefinitely .