decoupled encryption and storage from secure token web services