public-key encryption based secrets storage