Secrets are signed with HMAC SHA256 and encrypted with AES 256 CTR using keys that live on the Sharelock server