Keys live on Sharelock server [1]
Secrets are signed with HMAC SHA256 and encrypted with AES 256 CTR using keys that live on the Sharelock server