Keeping secrets

This adds a "edit_response" waffle. Could use some feedback on the implementation.