secure strings API
more docs