One-time secret sharing

A short look at how a one-time secret service decides when a secret is consumed, handles races with DELETE … RETURNING, and checks passwords without sending them.