Secure one-time secret sharing — client-side AES256 encryption, the key never leaves the URL.