Function deserialize_secret_in_context 

pub fn deserialize_secret_in_context(
    ctx: SecretContext<'_>,
    stored: &str,
) -> SshCliResult<String>

Deserializes a secret expected to belong to ctx.

Fails when a v2 blob was sealed for a different host or a different field: the AEAD tag no longer verifies, which is the whole point of A7.

Errors

Missing primary key, malformed blob, or AEAD verification failure.