sensitive data handling

[glormph]

We need to be able to handle sensitive personal data so that it will be protected from users without access and not processed on our systems, and stored backed up encrypted.