Saving and clearing

Saving a secret encrypts and upserts (replacing any prior value for that user/provider, with a new IV). Clearing a secret deletes the row. Keep the save path the only way secrets enter storage, so encryption is never bypassed.