Use very-hard-to-guess values for object brand properties.

Closes #2.
Stop retaining a permanent reference to the host object.

Closes #1.
Allow secrets to be forgotten.