Today in "joepie does questionable crypto design stuff": encrypting an encryption key with itself so that it can be added into a manifest while keeping its hash verifiable but without disclosing the key to anyone who does not already have it