It doesn't really make sense to encrypt the keys, but store the secret literally in the same directory. uploadkeys will now be stored in plaintext. The branch `legacy` has the old code from before this commit.
On macOS, a dependency of secrets fails to install using pip. After testing, it looks like the secrets module is not required.