This commit replaces the currently used channel construction for en/decrypting config data with a provable secure scheme.
Andreas Auernhammer