One can keep a secret key anywhere other than Document or Library directory of such apps. One of the obvious place will be device keychain.