add a security layer to encrypt the AT in DB

[devhindo]

create a key locally in .tempxcli and use to retrieve the AT from DB and decrypt it locally