A good plan needs redundancy and optionality. Redundancy means a third key, full descriptor stored at each backup point, and three geographic locations. Optionality means any single provider can be replaced if something happens, and future scripts can also be migrated.