// Package crypto encrypts local secrets with keys derived from the daemon's
// Ed25519 key pair. It provides best-effort local-at-rest protection for config
// values such as provider API keys.
package crypto