Use secrets without putting plaintext in the agent's context.
Recent revisions are kept. Restoring one creates a new revision.
