readme: document key derivation and storage crypto
readme: add explanation of cached secrets interface
readme: security threat model discussion