encrypted/remote secret manager
