# `WardrikOAuth.ClientSecrets`

Seals client secrets in the vault, not the store.

Covers providers added at runtime and clients Wardrik registers. Secrets are kept under a
principal of their own that no agent acts as.

# `forget`

```elixir
@spec forget(map(), String.t()) :: :ok
```

Deletes the secret under `name`.

# `seal`

```elixir
@spec seal(map(), String.t(), String.t() | nil) :: :ok | {:error, term()}
```

Seals `secret` under `name`. Does nothing if `secret` is `nil`.

# `unseal`

```elixir
@spec unseal(map(), String.t()) :: String.t() | nil
```

Returns the secret under `name`, or `nil`.

---

*Consult [api-reference.md](api-reference.md) for complete listing*