Every secret in this stack is encrypted before it touches disk.