Migrate other user-defined secrets to new encryption tooling.

Created by: arussellsaw

in RFC 310 we're tackling the highest priority user secrets to encrypt before GA, but we want to encrypt all zero-visibility data in the long run, this issue is to track the remaining secrets we'd like to redact: