Pin-protected secret sharing with client-side encryption