imports

Opaque-handle access to a secrets backend. Returning secret rather than the underlying value lets the host gate reveal independently of lookup.

Unwraps an opaque secret handle into its underlying value. Split from store so a host can audit or restrict reveal calls separately.