Deletes a secret; adapter failures reject.
Releases the change subscription.
Gets a secret value; adapter failures reject.
Lists every key this extension has stored secrets under.
Fires with the affected key whenever a secret is stored or deleted.
Stores a secret value; adapter failures reject.
A secret store spanning every secret this extension owns.
Secret values never appear in logs, diagnostics or thrown errors — only key names do. That rule holds everywhere in this module.