#client-side secret storage