switch from hashing to encryption, allow setting of desired secret
remove support for :plain secrets
get rid of unnecessary database cleaner