Not bad @erictgrubaugh, I could face it with a Suitelet and encrypt the keys curing the creation of the 'singleton' custom record