How is the persistent, secret key managed and stored securely, and what mechanisms are in place to prevent key leakage or unauthorized re-signing of tampered chats?