keyring: .secret() & .nonce() both account for .atime updates