SecretHolder: initialization