Bulk decryption key: Can I decrypt a complete server?

There are error messages in the capi which talk about a “bulk encryption keys”. Do these exist? Is there any kind of escrow mechanishm in Domino?

Is there a way to get hold of a master ID-file that decrypts everything?

I also did not find any API in the C-API to open an ID-file and decrypt a mail with that ID.