RT was in Kenya last week.
From RainMaker User Manual:
Upon configuring a piece of removable media, a public/private key pair is generated (the private key in generated in Implant\Deploy as well as in PostProcessor). The private key must/must be kept in order to decrypt the returned data.
A few days JA sent out a tweet that appeared to be an encryption key, or at least part of one.