Generalize lifetimes for accessor methods

Only the constructor needs to care about the marker lifetime; anything
that borrows the SecretData does not, since you cannot instigate moves
through a borrowed pointer.