Use salted key for secret store; don't store extra data; no implicit secret setting