Use fernet for returned keys/secrets

https://github.com/fernet/spec/blob/master/Spec.md
Suggested by @justincormack. He suggested that we should use a random IV, and that it should be returned to the client with the value. Apparently, Docker's switching to it for some of the Dockers stuff.