Stored Tokens (Metadata)

Raw tokens are AES-GCM encrypted and never exposed to the frontend.