the local vertex agent should encrypt its local storage at rest

[glyph]

To protect sensitive information from other applications, the vertex agent app should really only decrypt it in memory; it should be encrypted on disk.

This depends on #40