Keeping Secrets in the Cloud: How to Automate Sensitive Data Protection