-- A provider with one credential shares it with every consumer (novox/hq ADR 0158).
--
-- The provider's own secret and every consumer's pair row then carry one value, sealed once per
-- holder. The mesh keeps no plaintext, so it cannot tell by reading that they agree; it stamps the
-- act that made them instead. A pair row whose stamp is the own secret's was sealed from the same
-- value; one whose stamp differs, or is missing, is remade for every holder at once.
alter table module_secret add column generation text;
alter table secret add column generation text;