diff --git a/.github/workflows/gradle-build.yml b/.github/workflows/gradle-build.yml
deleted file mode 100644
index 0774821..0000000
--- a/.github/workflows/gradle-build.yml
+++ /dev/null
@@ -1,24 +0,0 @@
-name: Gradle Build
-on: [push]
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v1
-        with:
-          lfs: true
-      - name: Set up JDK 11
-        uses: actions/setup-java@v1
-        with:
-          java-version: 11
-      - uses: actions/cache@v1
-        with:
-          path: ~/.gradle/caches
-          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle.kts') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-
-      - name: Setup Android problem matchers
-        uses: jonasb/android-problem-matchers-action@v1
-      - name: Build with Gradle
-        run: ./gradlew build
diff --git a/.github/workflows/gradle-wrapper-validation.yml b/.github/workflows/gradle-wrapper-validation.yml
deleted file mode 100644
index f552c8d..0000000
--- a/.github/workflows/gradle-wrapper-validation.yml
+++ /dev/null
@@ -1,10 +0,0 @@
-name: "Validate Gradle Wrapper"
-on: [push]
-
-jobs:
-  validation:
-    name: "Validation"
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - uses: gradle/wrapper-validation-action@v1
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
new file mode 100644
index 0000000..15cf15f
--- /dev/null
+++ b/.github/workflows/main.yml
@@ -0,0 +1,33 @@
+name: Main CI
+on: [ push ]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  spotless:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: 17
+      - name: Run Spotless
+        run: ./gradlew spotlessCheck
+
+  build:
+    runs-on: macos-14
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: 17
+      - name: Setup Android problem matchers
+        uses: jonasb/android-problem-matchers-action@v1
+      - name: Build with Gradle
+        run: ./gradlew build
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
new file mode 100644
index 0000000..111942e
--- /dev/null
+++ b/.github/workflows/security.yml
@@ -0,0 +1,33 @@
+name: Security
+on: [push]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  mobfs:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Python 3.10
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.11'
+      - name: Run mobsfscan
+        uses: MobSF/mobsfscan@0.3.4
+        with:
+          args: . --sarif --output results.sarif || true
+      - name: Upload mobsfscan report
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: results.sarif
+
+  gradle-validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: gradle/wrapper-validation-action@v1
\ No newline at end of file
diff --git a/.idea/codeStyles/Project.xml b/.idea/codeStyles/Project.xml
index 3a342f4..3367caf 100644
--- a/.idea/codeStyles/Project.xml
+++ b/.idea/codeStyles/Project.xml
@@ -27,6 +27,9 @@
         <emptyLine />
       </value>
     </option>
+    <AndroidXmlCodeStyleSettings>
+      <option name="USE_CUSTOM_SETTINGS" value="true" />
+    </AndroidXmlCodeStyleSettings>
     <JavaCodeStyleSettings>
       <option name="IMPORT_LAYOUT_TABLE">
         <value>
@@ -59,7 +62,13 @@
       <option name="NAME_COUNT_TO_USE_STAR_IMPORT_FOR_MEMBERS" value="2147483647" />
       <option name="CODE_STYLE_DEFAULTS" value="KOTLIN_OFFICIAL" />
     </JetCodeStyleSettings>
+    <XML>
+      <option name="XML_KEEP_LINE_BREAKS" value="false" />
+      <option name="XML_ALIGN_ATTRIBUTES" value="false" />
+      <option name="XML_SPACE_INSIDE_EMPTY_TAG" value="true" />
+    </XML>
     <codeStyleSettings language="XML">
+      <option name="FORCE_REARRANGE_MODE" value="1" />
       <indentOptions>
         <option name="CONTINUATION_INDENT_SIZE" value="4" />
       </indentOptions>
diff --git a/.idea/compiler.xml b/.idea/compiler.xml
index 79910da..4d4e5be 100644
--- a/.idea/compiler.xml
+++ b/.idea/compiler.xml
@@ -11,7 +11,7 @@
       <entry name="!?*.kt" />
       <entry name="!?*.clj" />
     </wildcardResourcePatterns>
-    <bytecodeTargetLevel target="11">
+    <bytecodeTargetLevel target="17">
       <module name="Android.android-customtabs" target="11" />
     </bytecodeTargetLevel>
   </component>
diff --git a/.idea/deploymentTargetSelector.xml b/.idea/deploymentTargetSelector.xml
new file mode 100644
index 0000000..56b23e6
--- /dev/null
+++ b/.idea/deploymentTargetSelector.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="deploymentTargetSelector">
+    <selectionStates>
+      <SelectionState runConfigName="customtabs-example">
+        <option name="selectionMode" value="DROPDOWN" />
+      </SelectionState>
+      <SelectionState runConfigName="example">
+        <option name="selectionMode" value="DROPDOWN" />
+      </SelectionState>
+    </selectionStates>
+  </component>
+</project>
\ No newline at end of file
diff --git a/.idea/kotlinc.xml b/.idea/kotlinc.xml
index ae8a337..8491b65 100644
--- a/.idea/kotlinc.xml
+++ b/.idea/kotlinc.xml
@@ -1,9 +1,9 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project version="4">
-  <component name="Kotlin2JsCompilerArguments">
-    <option name="sourceMapEmbedSources" />
-  </component>
   <component name="Kotlin2JvmCompilerArguments">
     <option name="jvmTarget" value="1.8" />
   </component>
+  <component name="KotlinJpsPluginSettings">
+    <option name="version" value="1.9.22" />
+  </component>
 </project>
\ No newline at end of file
diff --git a/.idea/runConfigurations.xml b/.idea/runConfigurations.xml
deleted file mode 100644
index 7f68460..0000000
--- a/.idea/runConfigurations.xml
+++ /dev/null
@@ -1,12 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="RunConfigurationProducerService">
-    <option name="ignoredProducers">
-      <set>
-        <option value="org.jetbrains.plugins.gradle.execution.test.runner.AllInPackageGradleConfigurationProducer" />
-        <option value="org.jetbrains.plugins.gradle.execution.test.runner.TestClassGradleConfigurationProducer" />
-        <option value="org.jetbrains.plugins.gradle.execution.test.runner.TestMethodGradleConfigurationProducer" />
-      </set>
-    </option>
-  </component>
-</project>
\ No newline at end of file
diff --git a/.idea/vcs.xml b/.idea/vcs.xml
index 78cface..aa0b347 100644
--- a/.idea/vcs.xml
+++ b/.idea/vcs.xml
@@ -2,7 +2,10 @@
 <project version="4">
   <component name="CommitMessageInspectionProfile">
     <profile version="1.0">
+      <inspection_tool class="BodyLimit" enabled="true" level="WARNING" enabled_by_default="true" />
       <inspection_tool class="GrazieCommit" enabled="true" level="TYPO" enabled_by_default="true" />
+      <inspection_tool class="SubjectBodySeparation" enabled="true" level="WARNING" enabled_by_default="true" />
+      <inspection_tool class="SubjectLimit" enabled="true" level="WARNING" enabled_by_default="true" />
     </profile>
   </component>
   <component name="VcsDirectoryMappings">
diff --git a/build.gradle.kts b/build.gradle.kts
index 7cbac8a..c5deb02 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -19,14 +19,14 @@ buildscript {
         google()
     }
     dependencies {
-        classpath("com.android.tools.build:gradle:4.1.1")
+        classpath("com.android.tools.build:gradle:8.5.2")
     }
 }
 
 plugins {
     id("com.diffplug.spotless") version "5.12.4"
     id("com.github.ben-manes.versions") version "0.38.0"
-    kotlin("jvm") version "1.5.0"
+    kotlin("jvm") version "1.6.20"
 }
 
 repositories {
diff --git a/buildSrc/build.gradle.kts b/buildSrc/build.gradle.kts
deleted file mode 100644
index a738906..0000000
--- a/buildSrc/build.gradle.kts
+++ /dev/null
@@ -1,32 +0,0 @@
-plugins {
-    `kotlin-dsl`
-}
-
-repositories {
-    mavenCentral()
-}
-
-tasks {
-    val ensureSecretsExist by registering {
-        val secretFile = File("$projectDir/src/main/kotlin/Secrets.kt")
-        description = "Ensures that '$secretFile' exists"
-
-        outputs.file(secretFile)
-        doFirst {
-            if (!secretFile.exists()) {
-                secretFile.writeText(
-                    """
-object Secrets {
-    object Sonatype {
-        const val user = ""
-        const val apiKey = ""
-    }
-}
-
-""".trimIndent()
-                )
-            }
-        }
-    }
-    named("assemble") { dependsOn(ensureSecretsExist) }
-}
diff --git a/buildSrc/src/main/kotlin/Secrets.kt.enc b/buildSrc/src/main/kotlin/Secrets.kt.enc
deleted file mode 100644
index ccc3df3..0000000
Binary files a/buildSrc/src/main/kotlin/Secrets.kt.enc and /dev/null differ
diff --git a/customtabs-example/build.gradle.kts b/customtabs-example/build.gradle.kts
index a9396c7..8803015 100644
--- a/customtabs-example/build.gradle.kts
+++ b/customtabs-example/build.gradle.kts
@@ -26,12 +26,13 @@ repositories {
 }
 
 android {
-    compileSdkVersion(29)
+    namespace = "com.example.saschpe.customtabs"
 
     defaultConfig {
         applicationId = "com.example.saschpe.customtabs"
-        minSdkVersion(17)
-        targetSdkVersion(29)
+        compileSdk = 33
+        minSdk = 17
+        targetSdk = 33
         versionCode = 170030003
         versionName = "3.0.3"
         base.archivesBaseName = "$applicationId-$versionName"
@@ -54,8 +55,6 @@ android {
     }
 
     kotlinOptions.jvmTarget = "1.8"
-
-    sourceSets.forEach { it.java.srcDir("src/${it.name}/kotlin") }
 }
 
 dependencies {
diff --git a/customtabs-example/src/main/AndroidManifest.xml b/customtabs-example/src/main/AndroidManifest.xml
index d226442..e3bc9d3 100644
--- a/customtabs-example/src/main/AndroidManifest.xml
+++ b/customtabs-example/src/main/AndroidManifest.xml
@@ -14,8 +14,7 @@
   ~ limitations under the License.
   -->
 <manifest xmlns:android="http://schemas.android.com/apk/res/android"
-    xmlns:tools="http://schemas.android.com/tools"
-    package="com.example.saschpe.customtabs">
+    xmlns:tools="http://schemas.android.com/tools">
 
     <application
         android:name=".Application"
@@ -29,6 +28,7 @@
 
         <activity
             android:name=".activity.MainActivity"
+            android:exported="true"
             android:theme="@style/AppTheme.NoActionBar">
 
             <intent-filter>
@@ -40,4 +40,4 @@
 
     </application>
 
-</manifest>
\ No newline at end of file
+</manifest>
diff --git a/customtabs-example/src/main/kotlin/com/example/saschpe/customtabs/Application.kt b/customtabs-example/src/main/kotlin/com/example/saschpe/customtabs/Application.kt
index fbf63b6..24c0861 100644
--- a/customtabs-example/src/main/kotlin/com/example/saschpe/customtabs/Application.kt
+++ b/customtabs-example/src/main/kotlin/com/example/saschpe/customtabs/Application.kt
@@ -20,7 +20,7 @@ import androidx.appcompat.app.AppCompatDelegate
 import saschpe.android.customtabs.CustomTabsActivityLifecycleCallbacks
 
 /**
- * Optional pre-loading for improved performance
+ * Optional preloading for improved performance
  */
 class Application : android.app.Application() {
     override fun onCreate() {
diff --git a/customtabs-example/src/main/kotlin/com/example/saschpe/customtabs/activity/MainActivity.kt b/customtabs-example/src/main/kotlin/com/example/saschpe/customtabs/activity/MainActivity.kt
index 5780e7f..c9a8195 100644
--- a/customtabs-example/src/main/kotlin/com/example/saschpe/customtabs/activity/MainActivity.kt
+++ b/customtabs-example/src/main/kotlin/com/example/saschpe/customtabs/activity/MainActivity.kt
@@ -35,7 +35,7 @@ import saschpe.android.customtabs.WebViewFallback
 
 class MainActivity : AppCompatActivity() {
     /**
-     * Apply some sane defaults across a single app.
+     * Apply some sensible defaults across a single app.
      * Not strictly necessary but simplifies code when having many different
      * custom tab intents in one app.
      *
@@ -62,7 +62,7 @@ class MainActivity : AppCompatActivity() {
     }
 
     /**
-     * Start GitHub project custom tab
+     * Start a GitHub project custom tab
      *
      * See https://developer.chrome.com/multidevice/android/customtabs
      */
diff --git a/customtabs/build.gradle.kts b/customtabs/build.gradle.kts
index a932a71..20c00ad 100644
--- a/customtabs/build.gradle.kts
+++ b/customtabs/build.gradle.kts
@@ -28,17 +28,16 @@ repositories {
 }
 
 android {
-    compileSdkVersion(29)
+    namespace = "saschpe.android.customtabs"
 
     defaultConfig {
-        minSdkVersion(16)
-        targetSdkVersion(29)
-        versionName = "3.0.3"
+        compileSdk = 33
+        minSdk = 16
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
     }
 
     buildTypes {
-        named("release") {
+        release {
             isMinifyEnabled = true
             proguardFiles(getDefaultProguardFile("proguard-android.txt"), "proguard-rules.pro")
         }
@@ -61,7 +60,7 @@ dependencies {
 
     testImplementation("androidx.test:core:1.3.0")
     testImplementation("androidx.test.ext:junit:1.1.2")
-    testImplementation("org.robolectric:robolectric:4.5.1")
+    testImplementation("org.robolectric:robolectric:4.7.1")
     testImplementation("org.mockito:mockito-core:3.9.0")
 }
 
@@ -85,6 +84,7 @@ publishing {
     publications {
         register<MavenPublication>("mavenAndroid") {
             artifactId = "android-customtabs"
+            version = "3.0.3"
 
             afterEvaluate { artifact(tasks.getByName("bundleReleaseAar")) }
             artifact(tasks.getByName("javadocJar"))
@@ -139,14 +139,16 @@ publishing {
         }
     }
 
-    repositories {
-        maven {
-            name = "sonatype"
-            credentials {
-                username = Secrets.Sonatype.user
-                password = Secrets.Sonatype.apiKey
+    if (hasProperty("sonatypeUser") && hasProperty("sonatypePass")) {
+        repositories {
+            maven {
+                name = "sonatype"
+                credentials {
+                    username = property("sonatypeUser") as String
+                    password = property("sonatypePass") as String
+                }
+                url = uri("https://oss.sonatype.org/service/local/staging/deploy/maven2")
             }
-            url = uri("https://oss.sonatype.org/service/local/staging/deploy/maven2")
         }
     }
 }
diff --git a/customtabs/src/main/AndroidManifest.xml b/customtabs/src/main/AndroidManifest.xml
index 1b50fd0..fb1766b 100644
--- a/customtabs/src/main/AndroidManifest.xml
+++ b/customtabs/src/main/AndroidManifest.xml
@@ -13,14 +13,15 @@
   ~ See the License for the specific language governing permissions and
   ~ limitations under the License.
   -->
-<manifest xmlns:android="http://schemas.android.com/apk/res/android"
-    package="saschpe.android.customtabs">
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
 
     <uses-permission android:name="android.permission.INTERNET" />
 
     <application>
 
-        <activity android:name=".WebViewActivity" />
+        <activity
+            android:name=".WebViewActivity"
+            android:exported="true" />
 
         <meta-data
             android:name="android.webkit.WebView.MetricsOptOut"
diff --git a/customtabs/src/main/java/saschpe/android/customtabs/CustomTabsHelper.kt b/customtabs/src/main/java/saschpe/android/customtabs/CustomTabsHelper.kt
index 20ebce8..854a765 100644
--- a/customtabs/src/main/java/saschpe/android/customtabs/CustomTabsHelper.kt
+++ b/customtabs/src/main/java/saschpe/android/customtabs/CustomTabsHelper.kt
@@ -43,7 +43,7 @@ class CustomTabsHelper {
         connection?.let {
             try {
                 activity.unbindService(it)
-            } catch (e: IllegalArgumentException) {
+            } catch (_: IllegalArgumentException) {
             }
             client = null
             customTabsSession = null
@@ -145,10 +145,10 @@ class CustomTabsHelper {
             "android.support.customtabs.extra.KEEP_ALIVE"
 
         /**
-         * Opens the URL on a Custom Tab if possible. Otherwise fallsback to opening it on a WebView
+         * Opens the URL on a Custom Tab if possible. Otherwise, falls back to opening it on a WebView
          *
          * @param context The host activity
-         * @param customTabsIntent a CustomTabsIntent to be used if Custom Tabs is available
+         * @param customTabsIntent customTabsIntent to be used if Custom Tabs is available
          * @param uri the Uri to be opened
          * @param fallback a CustomTabFallback to be used if Custom Tabs is not available
          */
@@ -159,8 +159,8 @@ class CustomTabsHelper {
             fallback: CustomTabFallback?
         ) {
             val packageName = getPackageNameToUse(context)
-            // If we cant find a package name, it means there's no browser that supports
-            // Chrome Custom Tabs installed. So, we fallback to the web-view
+            // If we can't find a package name, it means there's no browser that supports Chrome Custom Tabs installed.
+            // So, we fall back to the web-view
             if (packageName == null) {
                 fallback?.openUri(context, uri)
             } else {
diff --git a/customtabs/src/main/java/saschpe/android/customtabs/CustomTabsPackageHelper.kt b/customtabs/src/main/java/saschpe/android/customtabs/CustomTabsPackageHelper.kt
index ef931cb..f8eef4f 100644
--- a/customtabs/src/main/java/saschpe/android/customtabs/CustomTabsPackageHelper.kt
+++ b/customtabs/src/main/java/saschpe/android/customtabs/CustomTabsPackageHelper.kt
@@ -36,13 +36,13 @@ internal object CustomTabsPackageHelper {
 
     /**
      * Goes through all apps that handle VIEW intents and have a warmup service. Picks
-     * the one chosen by the user if there is one, otherwise makes a best effort to return a
+     * the one chosen by the user if there is one, otherwise makes the best effort to return a
      * valid package name.
      *
      * This is **not** threadsafe.
      *
      * @param context [Context] to use for accessing [PackageManager].
-     * @return The package name recommended to use for connecting to custom tabs related components.
+     * @return The package name recommended for connecting to custom tabs related components.
      */
     @JvmStatic
     fun getPackageNameToUse(context: Context): String? {
@@ -52,7 +52,7 @@ internal object CustomTabsPackageHelper {
         val pm = context.packageManager
 
         // Get default VIEW intent handler.
-        val activityIntent = Intent(Intent.ACTION_VIEW, Uri.parse("http://www.example.com"))
+        val activityIntent = Intent(Intent.ACTION_VIEW, Uri.parse("https://www.example.com"))
         val defaultHandlerInfo = pm.resolveActivity(activityIntent, 0)
         val defaultHandlerPackageName: String? = defaultHandlerInfo?.activityInfo?.packageName
 
diff --git a/customtabs/src/main/java/saschpe/android/customtabs/WebViewActivity.kt b/customtabs/src/main/java/saschpe/android/customtabs/WebViewActivity.kt
index 91827ae..de155e7 100644
--- a/customtabs/src/main/java/saschpe/android/customtabs/WebViewActivity.kt
+++ b/customtabs/src/main/java/saschpe/android/customtabs/WebViewActivity.kt
@@ -45,7 +45,7 @@ class WebViewActivity : AppCompatActivity(R.layout.activity_webview) {
         url?.let { webView.loadUrl(it) }
         webView.settings.javaScriptEnabled = true
 
-        // No title provided. Use the website's once it's loaded...
+        // No title provided. Use the website once it's loaded...
         if (title == null) {
             webView.webViewClient = object : WebViewClient() {
                 override fun onPageFinished(view: WebView, url: String) {
diff --git a/gradle.properties b/gradle.properties
index 72997cf..9b6b556 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -1,14 +1,13 @@
-# Project-wide Gradle settings.
-org.gradle.configureondemand=true
-org.gradle.jvmargs=-Xmx2048m -XX:MaxPermSize=512m -XX:+HeapDumpOnOutOfMemoryError -Dfile.encoding=UTF-8
-org.gradle.parallel=true
+# Gradle
+file.encoding=utf-8
 org.gradle.caching=true
+org.gradle.jvmargs=-Xmx4096m -XX:+HeapDumpOnOutOfMemoryError -Dfile.encoding=UTF-8
+org.gradle.parallel=true
 
 # Kotlin
 kotlin.code.style=official
-# https://blog.jetbrains.com/kotlin/2019/01/kotlin-1-3-20-released
-kotlin.parallel.tasks.in.project=true
 
-# AndroidX
+# Android
 android.useAndroidX=true
-android.enableJetifier=true
+android.nonTransitiveRClass=false
+android.nonFinalResIds=false
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index d435ce2..d951fac 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,5 +1,5 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-7.0.1-all.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.7-all.zip
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists
diff --git a/scripts/secret b/scripts/secret
deleted file mode 100755
index 5b76bc5..0000000
--- a/scripts/secret
+++ /dev/null
@@ -1,75 +0,0 @@
-#!/bin/bash
-#
-# Script to encrypt / decrypt secrets.
-#
-
-SCRIPT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
-. "${SCRIPT_DIR}/inc.functions.sh"
-
-# Constants
-SECRET_FILES=(
-    buildSrc/src/main/kotlin/Secrets.kt
-)
-
-# Functions
-function usage {
-    echo -e "Usage: ${0} [COMMAND]"
-    echo -e "Options:"
-    echo -e "  --password PASSWORD"
-    echo -e "Commands:"
-    echo -e "  decrypt"
-    echo -e "  encrypt"
-    exit 1
-}
-
-# Command-line arguments
-openssl_password_option=
-openssl_command=
-while [[ $# -gt 0 ]] ; do
-    key="$1"
-    case ${key} in
-    decrypt)
-        openssl_command=decrypt
-        ;;
-    encrypt)
-        openssl_command=encrypt
-        ;;
-    -p|--password)
-        openssl_password_option="-k $2"
-        shift # past argument
-        ;;
-    -h|--help)
-        usage
-        ;;
-    *)
-        warn "Unknown option: ${key}"
-        usage
-        ;;
-    esac
-    shift # past argument or value
-done
-
-# Checks
-[[ -n "${openssl_command}" ]] || usage
-
-# Let's roll
-case ${openssl_command} in
-    decrypt)
-        for file in "${SECRET_FILES[@]}" ; do
-            approve "Decrypting ${file}.enc"
-            safe openssl enc ${openssl_password_option} -d -aes-256-cbc \
-                -in ${file}.enc -out ${file} -md sha256
-            if [[ "$(file -b ${file})" = "data" ]] ; then
-                rm -f ${file}
-                die "Failed to decrypt ${file}"
-            fi
-        done
-        ;;
-    encrypt)
-        for file in "${SECRET_FILES[@]}" ; do
-            approve "Encrypting ${file}"
-            safe openssl enc ${openssl_password_option} -aes-256-cbc -salt \
-                -in ${file} -out ${file}.enc -md sha256
-        done
-        ;;
-esac