-`~/.local/secrets` - Store general long-term clear secrets that are not protected by a password.
-`~/.local/secrets/device` - Long-term secrets that are unique and specific to this device. (Eg. forge client token, LUKS key for external USB thumbdrive, Gotify client token)
-`~/.local/secrets/root_ca` - Long-term local Root Certificate authorities private keys.