I'm not sure I approve of "cryptographically secure fashion". Sounds a bit like "magic".

The important part about the key is that it is a per-user secret?