abstracting assets so they can be stored encrypted or in-the-clear