pub async fn new_secret_keys(vault: &mut impl SecretVault)