This service stores OAuth tokens in encrypted local form, plus bound account identity required to generate private summaries.