Does anybody know a good way (or has a good link) for managing encryption keys
after a java distributed (web) application has them created?

That is, what kind of an object would hold them and how can they be stored
safely?
Is there a mainstream way pattern?