The password manager is almost the right shape to be the user's (object-capability) powerbox. It would need to be keyed off something like an interface name, rather than a DNS name, but otherwise it could work well.
Follow
@tonyg not local, but the Sandstorm web app project say they have a powerbox
https://docs.sandstorm.io/en/latest/using/security-practices/
