encrypt_store even if exception raised
re-add expiration

also privatize most methods

closes #4