TODO add "help" route fix bug listing duplicated secrets add secret via UI edit secret via UI render subroutes aes-256-cbc "unit" tests load default key from config if --key-file is not specified