I know it's something like that, that a second copy of data is stored in the master keychain.

But the question then persists, what exactly is stored there? It could merely store the filevault's actual keychain, but it could also store the user's cleartext password?

I work for the Department of Redundancy Department