Ahh, right. So is it the case that a secret is sealed with a userId if and only if it is stored on user document, and every secret stored on a user document is sealed with a userId? That seems like an easy rubric to remember.

Maybe at some point if we want to add secrets associated with a user not on the user document we can do something more complicated, but this seems good for now.