move boilerplate attrs to roles for data & item
support SecureNotes
promote decrypted_data to an attr
free caching via lazy builder
credit card support