A computing system comprising: one or more processors; and one or more computer-readable media having stored thereon instructions that are executable by the one or more processors to configure the computer system to obtain a sealed secret, including instructions that are executable to configure the computer system to perform at least the following: attempt to unseal the secret contained in a first BLOB at a computing system from among a plurality of different BLOBs wherein each of the BLOBs in the plurality of BLOBs contains the secret and wherein each of the BLOBs in the plurality of BLOBs is sealed to a different condition from among a plurality of conditions, wherein a given condition is a reflection of a system state where the system state is indicative of whether or not the system can be trusted to receive the secret, wherein the first BLOB is decrypted using a first condition; when the first condition is met, determining whether a second BLOB needs to be updated and updating the second BLOB if this is determined to be necessary; when the first condition is not met, attempting to unseal the secret contained in the second BLOB using a second condition; wherein, when the first or second condition is met, the attempt to unseal the secret contained in the first BLOB or the second BLOB is successful, and the secret is provided to an external entity, wherein the one or more computer-readable media further have stored thereon instructions that are executable by the one or more processors to configure the computer system to, as a result of determining that at least one of the conditions is not met, then determine if one or more of the BLOBs needs to be updated. one or more processors; and one or more computer-readable media having stored thereon instructions that are executable by the one or more processors to configure the computer system to obtain a sealed secret, including instructions that are executable to configure the computer system to perform at least the following: attempt to unseal the secret contained in a first BLOB at a computing system from among a plurality of different BLOBs wherein each of the BLOBs in the plurality of BLOBs contains the secret and wherein each of the BLOBs in the plurality of BLOBs is sealed to a different condition from among a plurality of conditions, wherein a given condition is a reflection of a system state where the system state is indicative of whether or not the system can be trusted to receive the secret, wherein the first BLOB is decrypted using a first condition; when the first condition is met, determining whether a second BLOB needs to be updated and updating the second BLOB if this is determined to be necessary; when the first condition is not met, attempting to unseal the secret contained in the second BLOB using a second condition; wherein, when the first or second condition is met, the attempt to unseal the secret contained in the first BLOB or the second BLOB is successful, and the secret is provided to an external entity, wherein the one or more computer-readable media further have stored thereon instructions that are executable by the one or more processors to configure the computer system to, as a result of determining that at least one of the conditions is not met, then determine if one or more of the BLOBs needs to be updated. attempt to unseal the secret contained in a first BLOB at a computing system from among a plurality of different BLOBs wherein each of the BLOBs in the plurality of BLOBs contains the secret and wherein each of the BLOBs in the plurality of BLOBs is sealed to a different condition from among a plurality of conditions, wherein a given condition is a reflection of a system state where the system state is indicative of whether or not the system can be trusted to receive the secret, wherein the first BLOB is decrypted using a first condition; when the first condition is met, determining whether a second BLOB needs to be updated and updating the second BLOB if this is determined to be necessary; when the first condition is not met, attempting to unseal the secret contained in the second BLOB using a second condition; wherein, when the first or second condition is met, the attempt to unseal the secret contained in the first BLOB or the second BLOB is successful, and the secret is provided to an external entity, wherein the one or more computer-readable media further have stored thereon instructions that are executable by the one or more processors to configure the computer system to, as a result of determining that at least one of the conditions is not met, then determine if one or more of the BLOBs needs to be updated.