ShareSecretBack Backend part for share-secret.fullpipe.dev TODO port to env var magic constants to env vars test more errors? unseal timing