Masked keys, a create flow that reveals the secret exactly once, and a revoke that confirms before it fires.
It's still listed in Hoverlab's index, but asking for it returns nothing, so it can't be installed.