Package gaesecrets implements storage of secret blobs on top of datastore.
It is not super secure, but we have what we have: there's no other better mechanism to persistently store non-static secrets on GAE.
All secrets are global (live in default GAE namespace).
TODO(vadimsh): Merge into go.chromium.org/luci/server/gaeemulation once there are no other users.
Deprecated: use go.chromium.org/luci/server/secrets instead to fetch secrets from Google Secret Manager.
New constructs a secrets.Store implementation that uses datastore.
Config can be used to tweak parameters of the store. It is fine to use default values.