More backup set-specific stuff, including restructuring of secrets; also added new in-memory backend for testing purposes