1. A method performed by a computer system including an open processing domain, a secure processing domain, and a non-transitory storage medium storing instructions that, when executed by the computer system, cause the computer system to perform the method, the method comprising: invoking, by a client application executing in the open processing domain, a secure abstraction layer configured to interface with secret data protected by the secure processing domain; and performing, by the secure abstraction layer, a secure operation on the secret data based on an invocation from the client application.