Discussed with Peter, and we are thinking about not storing any raw data at all. This will stop us from rebuilding old mappings, and will somewhat complicate bugfixing in the future. But avoids the complexity of having to encrypt and decrypt raw data and the secrets management.
Originally posted by @PietrH in https://github.com/riparias/rato-occurrences/issues/138#issuecomment-1903989707