Bug 965672 - add FixedSecrets and DerivedSecrets classes; r=telliott