secrets: use base64 and make interface private

Created by: unknwon

This is a placeholder issue for tracking refactoring of secrets package.