Initial setup and first implementation for pdo storage of secrets

would be nice, but probably requires some changes in the ocra-implementations repository too. I can have a look at it if you want, but I wouldn't make this high prio