https://hackernoon.com/store-api-credentials-safely-obfuscation-before-encryption-is-key