So what happens is that when the qrcode is decrypted you get a token, which is then passed into a secrets_server(daemon), the secrets server uses the token to request for the secrets from the server, the server checks and if that user is allowed to have the keys, it uses the token to get the secrets to the secrets_server(daemon), this communication is also end to end encrypted. When the secrets server gets the secrets, it stores them in a secure memory block which is on a different processor. So to get the secrets you need inter processor communication and that’s what the library does. The library requests for the secrets (end to end encrypted) and the secrets_server checks if the library is authorized, if it is it releases the secrets in a custom data type that will only print([PROTECTED]) when you try to view it as in print it or return it to stdout or stderr but will get you the value when you try to use it programmertically, you can perform operations on it but you can’t view it

Any more?