code: func transformSecret(theirs *api.Secret) *Secret {
  	var ours Secret
  	updateSecret(&ours, theirs)
  	return &ours
  }
docs: // transformSecret transforms an api secret into our secret. This does not deep
  // copy underlying deep data structures, so it's not safe to modify the vault
  // secret as that may modify the data in the transformed secret.