imports

Opaque-handle access to a secrets backend. Returning `secret` rather than the underlying value lets the host gate reveal independently of lookup.

Unwraps an opaque `secret` handle into its underlying value. Split from `store` so a host can audit or restrict reveal calls separately.