Store Last.fm API key with encrypted secret

lib/music_library/secrets/secret.ex

@@ -0,0 +1,17 @@
+defmodule MusicLibrary.Secrets.Secret do
+  use Ecto.Schema
+  import Ecto.Changeset
+
+  @primary_key {:name, :string, autogenerate: false}
+  schema "secrets" do
+    field :value, MusicLibrary.Encrypted.Binary
+
+    timestamps(type: :utc_datetime)
+  end
+
+  def changeset(secret, attrs) do
+    secret
+    |> cast(attrs, [:name, :value])
+    |> validate_required([:name, :value])
+  end
+end