Handle secrets in constant time

Make most (all?) methods in `SecretSigned` and `SecretUnsigned` be constant time where possible.