With this tenet in mind, what is the preferred "Linux" method of engineering parts of an application that house sensitive information?