Deactivate buttons while working

[ralovely]

Some actions require roundtrips to the server, namely

• creating a secret (which sends an email) and
• showing a secret (which fetch and decrypts the secret).

The action buttons should be deactivated while working, replaced by a message.