It's Not A Backup Anymore

from here

Just as backups should be kept separate from the original data, encryption keys should be kept separate from the encrypted data.