diff --git a/Cargo.lock b/Cargo.lock
index 582ee72..b6a94e4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -21,6 +21,11 @@ dependencies = [
  "winapi 0.3.8 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "arc-swap"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
 [[package]]
 name = "atty"
 version = "0.2.13"
@@ -35,11 +40,21 @@ name = "bitflags"
 version = "1.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 
+[[package]]
+name = "bumpalo"
+version = "3.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
 [[package]]
 name = "byteorder"
 version = "1.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 
+[[package]]
+name = "bytes"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
 [[package]]
 name = "cc"
 version = "1.0.47"
@@ -77,6 +92,20 @@ dependencies = [
  "structopt 0.3.4 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "coffer-common"
+version = "0.1.0"
+dependencies = [
+ "bumpalo 3.1.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "env_logger 0.7.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "log 0.4.8 (registry+https://github.com/rust-lang/crates.io-index)",
+ "quick-error 1.2.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "seckey 0.9.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "serde 1.0.102 (registry+https://github.com/rust-lang/crates.io-index)",
+ "serde_cbor 0.10.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "sodiumoxide 0.2.5 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
 [[package]]
 name = "coffer-companion"
 version = "0.2.0"
@@ -95,6 +124,7 @@ dependencies = [
 name = "coffer-server"
 version = "0.2.0"
 dependencies = [
+ "coffer-common 0.1.0",
  "env_logger 0.7.1 (registry+https://github.com/rust-lang/crates.io-index)",
  "futures 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)",
  "log 0.4.8 (registry+https://github.com/rust-lang/crates.io-index)",
@@ -103,6 +133,7 @@ dependencies = [
  "serde_cbor 0.10.2 (registry+https://github.com/rust-lang/crates.io-index)",
  "sodiumoxide 0.2.5 (registry+https://github.com/rust-lang/crates.io-index)",
  "structopt 0.3.4 (registry+https://github.com/rust-lang/crates.io-index)",
+ "tokio 0.2.6 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
 [[package]]
@@ -169,6 +200,25 @@ dependencies = [
  "winapi 0.3.8 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "fnv"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
+[[package]]
+name = "fuchsia-zircon"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "bitflags 1.2.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "fuchsia-zircon-sys 0.3.3 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "fuchsia-zircon-sys"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
 [[package]]
 name = "futures"
 version = "0.3.1"
@@ -257,6 +307,16 @@ name = "gcc"
 version = "0.3.55"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 
+[[package]]
+name = "getrandom"
+version = "0.1.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "cfg-if 0.1.10 (registry+https://github.com/rust-lang/crates.io-index)",
+ "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
+ "wasi 0.7.0 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
 [[package]]
 name = "half"
 version = "1.4.0"
@@ -286,6 +346,23 @@ dependencies = [
  "quick-error 1.2.2 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "iovec"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "kernel32-sys"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "winapi 0.2.8 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi-build 0.1.1 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
 [[package]]
 name = "lazy_static"
 version = "1.4.0"
@@ -333,11 +410,96 @@ dependencies = [
  "cfg-if 0.1.10 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "mach_o_sys"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
 [[package]]
 name = "memchr"
 version = "2.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 
+[[package]]
+name = "memsec"
+version = "0.5.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "getrandom 0.1.13 (registry+https://github.com/rust-lang/crates.io-index)",
+ "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
+ "mach_o_sys 0.1.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi 0.3.8 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "mio"
+version = "0.6.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "cfg-if 0.1.10 (registry+https://github.com/rust-lang/crates.io-index)",
+ "fuchsia-zircon 0.3.3 (registry+https://github.com/rust-lang/crates.io-index)",
+ "fuchsia-zircon-sys 0.3.3 (registry+https://github.com/rust-lang/crates.io-index)",
+ "iovec 0.1.4 (registry+https://github.com/rust-lang/crates.io-index)",
+ "kernel32-sys 0.2.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
+ "log 0.4.8 (registry+https://github.com/rust-lang/crates.io-index)",
+ "miow 0.2.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "net2 0.2.33 (registry+https://github.com/rust-lang/crates.io-index)",
+ "slab 0.4.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi 0.2.8 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "mio-named-pipes"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "log 0.4.8 (registry+https://github.com/rust-lang/crates.io-index)",
+ "mio 0.6.21 (registry+https://github.com/rust-lang/crates.io-index)",
+ "miow 0.3.3 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi 0.3.8 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "mio-uds"
+version = "0.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "iovec 0.1.4 (registry+https://github.com/rust-lang/crates.io-index)",
+ "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
+ "mio 0.6.21 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "miow"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "kernel32-sys 0.2.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "net2 0.2.33 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi 0.2.8 (registry+https://github.com/rust-lang/crates.io-index)",
+ "ws2_32-sys 0.2.1 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "miow"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "socket2 0.3.11 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi 0.3.8 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "net2"
+version = "0.2.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "cfg-if 0.1.10 (registry+https://github.com/rust-lang/crates.io-index)",
+ "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi 0.3.8 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
 [[package]]
 name = "num_cpus"
 version = "1.11.1"
@@ -347,6 +509,11 @@ dependencies = [
  "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "pin-project-lite"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
 [[package]]
 name = "pin-utils"
 version = "0.1.0-alpha.4"
@@ -429,6 +596,14 @@ name = "rle-decode-fast"
 version = "1.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 
+[[package]]
+name = "seckey"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "memsec 0.5.6 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
 [[package]]
 name = "serde"
 version = "1.0.102"
@@ -468,11 +643,31 @@ dependencies = [
  "yaml-rust 0.4.3 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "signal-hook-registry"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "arc-swap 0.4.4 (registry+https://github.com/rust-lang/crates.io-index)",
+ "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
 [[package]]
 name = "slab"
 version = "0.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 
+[[package]]
+name = "socket2"
+version = "0.3.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "cfg-if 0.1.10 (registry+https://github.com/rust-lang/crates.io-index)",
+ "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
+ "redox_syscall 0.1.56 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi 0.3.8 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
 [[package]]
 name = "sodiumoxide"
 version = "0.2.5"
@@ -559,6 +754,38 @@ dependencies = [
  "lazy_static 1.4.0 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "tokio"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "bytes 0.5.3 (registry+https://github.com/rust-lang/crates.io-index)",
+ "fnv 1.0.6 (registry+https://github.com/rust-lang/crates.io-index)",
+ "futures-core 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "iovec 0.1.4 (registry+https://github.com/rust-lang/crates.io-index)",
+ "lazy_static 1.4.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)",
+ "memchr 2.2.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "mio 0.6.21 (registry+https://github.com/rust-lang/crates.io-index)",
+ "mio-named-pipes 0.1.6 (registry+https://github.com/rust-lang/crates.io-index)",
+ "mio-uds 0.6.7 (registry+https://github.com/rust-lang/crates.io-index)",
+ "num_cpus 1.11.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "pin-project-lite 0.1.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "signal-hook-registry 1.2.0 (registry+https://github.com/rust-lang/crates.io-index)",
+ "slab 0.4.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "tokio-macros 0.2.1 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi 0.3.8 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "quote 1.0.2 (registry+https://github.com/rust-lang/crates.io-index)",
+ "syn 1.0.8 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
 [[package]]
 name = "unicode-segmentation"
 version = "1.6.0"
@@ -584,6 +811,16 @@ name = "vec_map"
 version = "0.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 
+[[package]]
+name = "wasi"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
+[[package]]
+name = "winapi"
+version = "0.2.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
 [[package]]
 name = "winapi"
 version = "0.3.8"
@@ -593,6 +830,11 @@ dependencies = [
  "winapi-x86_64-pc-windows-gnu 0.4.0 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "winapi-build"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+
 [[package]]
 name = "winapi-i686-pc-windows-gnu"
 version = "0.4.0"
@@ -620,6 +862,15 @@ dependencies = [
  "winapi-util 0.1.2 (registry+https://github.com/rust-lang/crates.io-index)",
 ]
 
+[[package]]
+name = "ws2_32-sys"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+dependencies = [
+ "winapi 0.2.8 (registry+https://github.com/rust-lang/crates.io-index)",
+ "winapi-build 0.1.1 (registry+https://github.com/rust-lang/crates.io-index)",
+]
+
 [[package]]
 name = "xattr"
 version = "0.2.2"
@@ -640,9 +891,12 @@ dependencies = [
 "checksum adler32 1.0.4 (registry+https://github.com/rust-lang/crates.io-index)" = "5d2e7343e7fc9de883d1b0341e0b13970f764c14101234857d2ddafa1cb1cac2"
 "checksum aho-corasick 0.7.6 (registry+https://github.com/rust-lang/crates.io-index)" = "58fb5e95d83b38284460a5fda7d6470aa0b8844d283a0b614b8535e880800d2d"
 "checksum ansi_term 0.11.0 (registry+https://github.com/rust-lang/crates.io-index)" = "ee49baf6cb617b853aa8d93bf420db2383fab46d314482ca2803b40d5fde979b"
+"checksum arc-swap 0.4.4 (registry+https://github.com/rust-lang/crates.io-index)" = "d7b8a9123b8027467bce0099fe556c628a53c8d83df0507084c31e9ba2e39aff"
 "checksum atty 0.2.13 (registry+https://github.com/rust-lang/crates.io-index)" = "1803c647a3ec87095e7ae7acfca019e98de5ec9a7d01343f611cf3152ed71a90"
 "checksum bitflags 1.2.1 (registry+https://github.com/rust-lang/crates.io-index)" = "cf1de2fe8c75bc145a2f577add951f8134889b4795d47466a54a5c846d691693"
+"checksum bumpalo 3.1.1 (registry+https://github.com/rust-lang/crates.io-index)" = "8fe2567a8d8a3aedb4e39aa39e186d5673acfd56393c6ac83b2bc5bd82f4369c"
 "checksum byteorder 1.3.2 (registry+https://github.com/rust-lang/crates.io-index)" = "a7c3dd8985a7111efc5c80b44e23ecdd8c007de8ade3b96595387e812b957cf5"
+"checksum bytes 0.5.3 (registry+https://github.com/rust-lang/crates.io-index)" = "10004c15deb332055f7a4a208190aed362cf9a7c2f6ab70a305fba50e1105f38"
 "checksum cc 1.0.47 (registry+https://github.com/rust-lang/crates.io-index)" = "aa87058dce70a3ff5621797f1506cb837edd02ac4c0ae642b4542dce802908b8"
 "checksum cfg-if 0.1.10 (registry+https://github.com/rust-lang/crates.io-index)" = "4785bdd1c96b2a846b2bd7cc02e86b6b3dbf14e7e53446c4f54c92a361040822"
 "checksum clap 2.33.0 (registry+https://github.com/rust-lang/crates.io-index)" = "5067f5bb2d80ef5d68b4c87db81601f0b75bca627bc2ef76b141d7b846a3c6d9"
@@ -653,6 +907,9 @@ dependencies = [
 "checksum errno-dragonfly 0.1.1 (registry+https://github.com/rust-lang/crates.io-index)" = "14ca354e36190500e1e1fb267c647932382b54053c50b14970856c0b00a35067"
 "checksum exec 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)" = "886b70328cba8871bfc025858e1de4be16b1d5088f2ba50b57816f4210672615"
 "checksum filetime 0.2.8 (registry+https://github.com/rust-lang/crates.io-index)" = "1ff6d4dab0aa0c8e6346d46052e93b13a16cf847b54ed357087c35011048cc7d"
+"checksum fnv 1.0.6 (registry+https://github.com/rust-lang/crates.io-index)" = "2fad85553e09a6f881f739c29f0b00b0f01357c743266d478b68951ce23285f3"
+"checksum fuchsia-zircon 0.3.3 (registry+https://github.com/rust-lang/crates.io-index)" = "2e9763c69ebaae630ba35f74888db465e49e259ba1bc0eda7d06f4a067615d82"
+"checksum fuchsia-zircon-sys 0.3.3 (registry+https://github.com/rust-lang/crates.io-index)" = "3dcaa9ae7725d12cdb85b3ad99a434db70b468c09ded17e012d86b5c1010f7a7"
 "checksum futures 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)" = "b6f16056ecbb57525ff698bb955162d0cd03bee84e6241c27ff75c08d8ca5987"
 "checksum futures-channel 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)" = "fcae98ca17d102fd8a3603727b9259fcf7fa4239b603d2142926189bc8999b86"
 "checksum futures-core 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)" = "79564c427afefab1dfb3298535b21eda083ef7935b4f0ecbfcb121f0aec10866"
@@ -663,18 +920,30 @@ dependencies = [
 "checksum futures-task 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)" = "0bae52d6b29cf440e298856fec3965ee6fa71b06aa7495178615953fd669e5f9"
 "checksum futures-util 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)" = "c0d66274fb76985d3c62c886d1da7ac4c0903a8c9f754e8fe0f35a6a6cc39e76"
 "checksum gcc 0.3.55 (registry+https://github.com/rust-lang/crates.io-index)" = "8f5f3913fa0bfe7ee1fd8248b6b9f42a5af4b9d65ec2dd2c3c26132b950ecfc2"
+"checksum getrandom 0.1.13 (registry+https://github.com/rust-lang/crates.io-index)" = "e7db7ca94ed4cd01190ceee0d8a8052f08a247aa1b469a7f68c6a3b71afcf407"
 "checksum half 1.4.0 (registry+https://github.com/rust-lang/crates.io-index)" = "9ff54597ea139063f4225f1ec47011b03c9de4a486957ff3fc506881dac951d0"
 "checksum heck 0.3.1 (registry+https://github.com/rust-lang/crates.io-index)" = "20564e78d53d2bb135c343b3f47714a56af2061f1c928fdb541dc7b9fdd94205"
 "checksum hermit-abi 0.1.3 (registry+https://github.com/rust-lang/crates.io-index)" = "307c3c9f937f38e3534b1d6447ecf090cafcc9744e4a6360e8b037b2cf5af120"
 "checksum humantime 1.3.0 (registry+https://github.com/rust-lang/crates.io-index)" = "df004cfca50ef23c36850aaaa59ad52cc70d0e90243c3c7737a4dd32dc7a3c4f"
+"checksum iovec 0.1.4 (registry+https://github.com/rust-lang/crates.io-index)" = "b2b3ea6ff95e175473f8ffe6a7eb7c00d054240321b84c57051175fe3c1e075e"
+"checksum kernel32-sys 0.2.2 (registry+https://github.com/rust-lang/crates.io-index)" = "7507624b29483431c0ba2d82aece8ca6cdba9382bff4ddd0f7490560c056098d"
 "checksum lazy_static 1.4.0 (registry+https://github.com/rust-lang/crates.io-index)" = "e2abad23fbc42b3700f2f279844dc832adb2b2eb069b2df918f455c4e18cc646"
 "checksum libc 0.2.65 (registry+https://github.com/rust-lang/crates.io-index)" = "1a31a0627fdf1f6a39ec0dd577e101440b7db22672c0901fe00a9a6fbb5c24e8"
 "checksum libflate 0.1.27 (registry+https://github.com/rust-lang/crates.io-index)" = "d9135df43b1f5d0e333385cb6e7897ecd1a43d7d11b91ac003f4d2c2d2401fdd"
 "checksum libsodium-sys 0.2.5 (registry+https://github.com/rust-lang/crates.io-index)" = "1c344ff12b90ef8fa1f0fffacd348c1fd041db331841fec9eab23fdb991f5e73"
 "checksum linked-hash-map 0.5.2 (registry+https://github.com/rust-lang/crates.io-index)" = "ae91b68aebc4ddb91978b11a1b02ddd8602a05ec19002801c5666000e05e0f83"
 "checksum log 0.4.8 (registry+https://github.com/rust-lang/crates.io-index)" = "14b6052be84e6b71ab17edffc2eeabf5c2c3ae1fdb464aae35ac50c67a44e1f7"
+"checksum mach_o_sys 0.1.1 (registry+https://github.com/rust-lang/crates.io-index)" = "3e854583a83f20cf329bb9283366335387f7db59d640d1412167e05fedb98826"
 "checksum memchr 2.2.1 (registry+https://github.com/rust-lang/crates.io-index)" = "88579771288728879b57485cc7d6b07d648c9f0141eb955f8ab7f9d45394468e"
+"checksum memsec 0.5.6 (registry+https://github.com/rust-lang/crates.io-index)" = "ccabb92f665f997bcb4f3ade019a8e07315148d8bcef3e65fbc5dbd65a22eb04"
+"checksum mio 0.6.21 (registry+https://github.com/rust-lang/crates.io-index)" = "302dec22bcf6bae6dfb69c647187f4b4d0fb6f535521f7bc022430ce8e12008f"
+"checksum mio-named-pipes 0.1.6 (registry+https://github.com/rust-lang/crates.io-index)" = "f5e374eff525ce1c5b7687c4cef63943e7686524a387933ad27ca7ec43779cb3"
+"checksum mio-uds 0.6.7 (registry+https://github.com/rust-lang/crates.io-index)" = "966257a94e196b11bb43aca423754d87429960a768de9414f3691d6957abf125"
+"checksum miow 0.2.1 (registry+https://github.com/rust-lang/crates.io-index)" = "8c1f2f3b1cf331de6896aabf6e9d55dca90356cc9960cca7eaaf408a355ae919"
+"checksum miow 0.3.3 (registry+https://github.com/rust-lang/crates.io-index)" = "396aa0f2003d7df8395cb93e09871561ccc3e785f0acb369170e8cc74ddf9226"
+"checksum net2 0.2.33 (registry+https://github.com/rust-lang/crates.io-index)" = "42550d9fb7b6684a6d404d9fa7250c2eb2646df731d1c06afc06dcee9e1bcf88"
 "checksum num_cpus 1.11.1 (registry+https://github.com/rust-lang/crates.io-index)" = "76dac5ed2a876980778b8b85f75a71b6cbf0db0b1232ee12f826bccb00d09d72"
+"checksum pin-project-lite 0.1.1 (registry+https://github.com/rust-lang/crates.io-index)" = "f0af6cbca0e6e3ce8692ee19fb8d734b641899e07b68eb73e9bbbd32f1703991"
 "checksum pin-utils 0.1.0-alpha.4 (registry+https://github.com/rust-lang/crates.io-index)" = "5894c618ce612a3fa23881b152b608bafb8c56cfc22f434a3ba3120b40f7b587"
 "checksum pkg-config 0.3.17 (registry+https://github.com/rust-lang/crates.io-index)" = "05da548ad6865900e60eaba7f589cc0783590a92e940c26953ff81ddbab2d677"
 "checksum proc-macro-error 0.2.6 (registry+https://github.com/rust-lang/crates.io-index)" = "aeccfe4d5d8ea175d5f0e4a2ad0637e0f4121d63bd99d356fb1f39ab2e7c6097"
@@ -687,11 +956,14 @@ dependencies = [
 "checksum regex 1.3.1 (registry+https://github.com/rust-lang/crates.io-index)" = "dc220bd33bdce8f093101afe22a037b8eb0e5af33592e6a9caafff0d4cb81cbd"
 "checksum regex-syntax 0.6.12 (registry+https://github.com/rust-lang/crates.io-index)" = "11a7e20d1cce64ef2fed88b66d347f88bd9babb82845b2b858f3edbf59a4f716"
 "checksum rle-decode-fast 1.0.1 (registry+https://github.com/rust-lang/crates.io-index)" = "cabe4fa914dec5870285fa7f71f602645da47c486e68486d2b4ceb4a343e90ac"
+"checksum seckey 0.9.1 (registry+https://github.com/rust-lang/crates.io-index)" = "c819d0a699db7622e4ee55a651f992242f754481f97de3024dc548adcce13237"
 "checksum serde 1.0.102 (registry+https://github.com/rust-lang/crates.io-index)" = "0c4b39bd9b0b087684013a792c59e3e07a46a01d2322518d8a1104641a0b1be0"
 "checksum serde_cbor 0.10.2 (registry+https://github.com/rust-lang/crates.io-index)" = "f7081ed758ec726a6ed8ee7e92f5d3f6e6f8c3901b1f972e3a4a2f2599fad14f"
 "checksum serde_derive 1.0.102 (registry+https://github.com/rust-lang/crates.io-index)" = "ca13fc1a832f793322228923fbb3aba9f3f44444898f835d31ad1b74fa0a2bf8"
 "checksum serde_yaml 0.8.11 (registry+https://github.com/rust-lang/crates.io-index)" = "691b17f19fc1ec9d94ec0b5864859290dff279dbd7b03f017afda54eb36c3c35"
+"checksum signal-hook-registry 1.2.0 (registry+https://github.com/rust-lang/crates.io-index)" = "94f478ede9f64724c5d173d7bb56099ec3e2d9fc2774aac65d34b8b890405f41"
 "checksum slab 0.4.2 (registry+https://github.com/rust-lang/crates.io-index)" = "c111b5bd5695e56cffe5129854aa230b39c93a305372fdbb2668ca2394eea9f8"
+"checksum socket2 0.3.11 (registry+https://github.com/rust-lang/crates.io-index)" = "e8b74de517221a2cb01a53349cf54182acdc31a074727d3079068448c0676d85"
 "checksum sodiumoxide 0.2.5 (registry+https://github.com/rust-lang/crates.io-index)" = "585232e78a4fc18133eef9946d3080befdf68b906c51b621531c37e91787fa2b"
 "checksum strsim 0.8.0 (registry+https://github.com/rust-lang/crates.io-index)" = "8ea5119cdb4c55b55d432abb513a0429384878c15dde60cc77b1c99de1a95a6a"
 "checksum structopt 0.3.4 (registry+https://github.com/rust-lang/crates.io-index)" = "c167b61c7d4c126927f5346a4327ce20abf8a186b8041bbeb1ce49e5db49587b"
@@ -702,15 +974,21 @@ dependencies = [
 "checksum termcolor 1.0.5 (registry+https://github.com/rust-lang/crates.io-index)" = "96d6098003bde162e4277c70665bd87c326f5a0c3f3fbfb285787fa482d54e6e"
 "checksum textwrap 0.11.0 (registry+https://github.com/rust-lang/crates.io-index)" = "d326610f408c7a4eb6f51c37c330e496b08506c9457c9d34287ecc38809fb060"
 "checksum thread_local 0.3.6 (registry+https://github.com/rust-lang/crates.io-index)" = "c6b53e329000edc2b34dbe8545fd20e55a333362d0a321909685a19bd28c3f1b"
+"checksum tokio 0.2.6 (registry+https://github.com/rust-lang/crates.io-index)" = "0e1bef565a52394086ecac0a6fa3b8ace4cb3a138ee1d96bd2b93283b56824e3"
+"checksum tokio-macros 0.2.1 (registry+https://github.com/rust-lang/crates.io-index)" = "7de6c21a09bab0ce34614bb1071403ad9996db62715eb61e63be5d82f91342bc"
 "checksum unicode-segmentation 1.6.0 (registry+https://github.com/rust-lang/crates.io-index)" = "e83e153d1053cbb5a118eeff7fd5be06ed99153f00dbcd8ae310c5fb2b22edc0"
 "checksum unicode-width 0.1.6 (registry+https://github.com/rust-lang/crates.io-index)" = "7007dbd421b92cc6e28410fe7362e2e0a2503394908f417b68ec8d1c364c4e20"
 "checksum unicode-xid 0.2.0 (registry+https://github.com/rust-lang/crates.io-index)" = "826e7639553986605ec5979c7dd957c7895e93eabed50ab2ffa7f6128a75097c"
 "checksum vcpkg 0.2.7 (registry+https://github.com/rust-lang/crates.io-index)" = "33dd455d0f96e90a75803cfeb7f948768c08d70a6de9a8d2362461935698bf95"
 "checksum vec_map 0.8.1 (registry+https://github.com/rust-lang/crates.io-index)" = "05c78687fb1a80548ae3250346c3db86a80a7cdd77bda190189f2d0a0987c81a"
+"checksum wasi 0.7.0 (registry+https://github.com/rust-lang/crates.io-index)" = "b89c3ce4ce14bdc6fb6beaf9ec7928ca331de5df7e5ea278375642a2f478570d"
+"checksum winapi 0.2.8 (registry+https://github.com/rust-lang/crates.io-index)" = "167dc9d6949a9b857f3451275e911c3f44255842c1f7a76f33c55103a909087a"
 "checksum winapi 0.3.8 (registry+https://github.com/rust-lang/crates.io-index)" = "8093091eeb260906a183e6ae1abdba2ef5ef2257a21801128899c3fc699229c6"
+"checksum winapi-build 0.1.1 (registry+https://github.com/rust-lang/crates.io-index)" = "2d315eee3b34aca4797b2da6b13ed88266e6d612562a0c46390af8299fc699bc"
 "checksum winapi-i686-pc-windows-gnu 0.4.0 (registry+https://github.com/rust-lang/crates.io-index)" = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
 "checksum winapi-util 0.1.2 (registry+https://github.com/rust-lang/crates.io-index)" = "7168bab6e1daee33b4557efd0e95d5ca70a03706d39fa5f3fe7a236f584b03c9"
 "checksum winapi-x86_64-pc-windows-gnu 0.4.0 (registry+https://github.com/rust-lang/crates.io-index)" = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 "checksum wincolor 1.0.2 (registry+https://github.com/rust-lang/crates.io-index)" = "96f5016b18804d24db43cebf3c77269e7569b8954a8464501c216cc5e070eaa9"
+"checksum ws2_32-sys 0.2.1 (registry+https://github.com/rust-lang/crates.io-index)" = "d59cefebd0c892fa2dd6de581e937301d8552cb44489cdff035c6187cb63fa5e"
 "checksum xattr 0.2.2 (registry+https://github.com/rust-lang/crates.io-index)" = "244c3741f4240ef46274860397c7c74e50eb23624996930e484c16679633a54c"
 "checksum yaml-rust 0.4.3 (registry+https://github.com/rust-lang/crates.io-index)" = "65923dd1784f44da1d2c3dbbc5e822045628c590ba72123e1c73d3c230c4434d"
diff --git a/Cargo.toml b/Cargo.toml
index 29ee1b5..61ed279 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -2,7 +2,8 @@
 members = [
         "coffer-server",
         "coffer-client",
-        "coffer-companion"
+        "coffer-companion",
+        "coffer-common"
 ]
 
 [profile.release]
diff --git a/Design.org b/Design.org
new file mode 100644
index 0000000..298b9aa
--- /dev/null
+++ b/Design.org
@@ -0,0 +1,43 @@
+* Communication
+** Frame 
+   Header ::: content-length: u64 | message-type: u8 ::: 72 bit, fixed
+   Body   ::: content: [u8; content-length]          ::: conent-length byte, variable
+
+   Numbers are in network byte order.
+
+** Message Types
+   
+   | Ordinal | Type  | Body Format     | Direction | Transitions      | Description                                  |
+   |---------+-------+-----------------+-----------+------------------+----------------------------------------------|
+   |       0 | Hello | Public Key      | C -> S    | Waiting for Link | Initiates communication                      |
+   |       1 | Link  | <empty>         | S -> C    | Put, Get         | Link established, communication can start    |
+   |       2 | Put   | Coffer (sealed) | C -> S    | OkPut            | Merge a ~Coffer~ for the client              |
+   |       3 | Get   | Coffer (sealed) | C -> S    | OkGet            | Retrieve a ~Coffer~ for the client           |
+   |       4 | OkPut | <empty>         | S -> C    | Put, Get         | ~Coffer~ was successfully merged             |
+   |       5 | OkGet | Coffer (sealed) | S -> C    | Put, Get         | Return a sealed ~Coffer~ for a ~Get~ request |
+   |     128 | Error |                 | S -> C    |                  | Generic server error                         |
+
+   - Error can be returned at any stage
+   - Communication can end at any stage. Communication ends when connection is closed by either side.
+   - Seal is determined by communication direction:
+     C -> S: sealed by server public key, client private key
+     S -> C: sealed by client public key, server private key
+
+* Coffer
+  - Multitree with each leave terminating in a Vec<u8>
+  - Nodes (except leaves = key path) are utf8 strings
+  - A ~Put~ request must contain a fully determined ~Coffer~ (all leaves are values)
+  - A ~Get~ request contains a partially determined ~Coffer~ (values are ignored)
+    - If a node resolves to a parent, the subtree (which is also a ~Coffer~) is returned
+    - If a node resolves to a leave, the partial ~Coffer~ terminating in the leave and its value are returned
+* Coffer Server
+  A ~coffer-server~ can support multiple clients by means of /sharding/ the
+  keyspace. Clients are uniquely identified by their public key.
+  
+  - A client can only access its /shard/ identified by its public key
+  - All server responses are sealed by the client's public key and server's
+    private key. No secrets can be extracted or communication data collected
+    except the private keys are compromised.
+  - All server requests are sealed by the server's public and client's private
+    key. No tampered requests can be sent or communication data collected except
+    the private keys are compromised.
diff --git a/TODO.org b/TODO.org
index 12734ce..6009367 100644
--- a/TODO.org
+++ b/TODO.org
@@ -1,3 +1,5 @@
+#+TODO: TODO NEXT DONE
+
 * General
 ** TODO Add a license
 ** TODO Better communication protocol
diff --git a/coffer-common/Cargo.toml b/coffer-common/Cargo.toml
new file mode 100644
index 0000000..edc1529
--- /dev/null
+++ b/coffer-common/Cargo.toml
@@ -0,0 +1,20 @@
+[package]
+name = "coffer-common"
+version = "0.1.0"
+authors = ["armin"]
+edition = "2018"
+
+# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+
+[dependencies]
+# Base tools
+log = "^0.4"
+env_logger = "^0.7"
+serde = { version = "^1.0", features = ["derive"]}
+serde_cbor = "^0.10"
+quick-error = "^1.2"
+# Key management/Cryptography
+sodiumoxide = "^0.2"
+seckey = "^0.9"
+# Memory management
+bumpalo = { version = "^3.1", features = ["collections"]}
\ No newline at end of file
diff --git a/coffer-common/src/certificate.rs b/coffer-common/src/certificate.rs
new file mode 100644
index 0000000..5dd0f3a
--- /dev/null
+++ b/coffer-common/src/certificate.rs
@@ -0,0 +1,98 @@
+//! Common certificate handling and encryption
+
+#[allow(unused_imports)]
+use log::{debug, error, info, trace, warn};
+
+use std::path::Path;
+use std::io::BufReader;
+use std::fs::File;
+use std::fmt::{Debug, Formatter};
+
+use quick_error::quick_error;
+
+use seckey::SecKey;
+use sodiumoxide::crypto::box_;
+use sodiumoxide::crypto::sealedbox;
+use serde::{Serialize, Deserialize};
+use serde_cbor;
+
+quick_error! {
+    #[derive(Debug)]
+    pub enum CertificateError {
+        Cbor(err: serde_cbor::Error) {
+            from()
+        }
+        Io(err: std::io::Error) {
+            from()
+        }
+        SecKey
+        Crypto
+    }
+}
+
+/// A secure container for certificates
+///
+/// # Certificate
+///
+/// A certificate consists of a public and a private key in a secure memory
+/// area. With a certificate data sealed and opened.
+pub struct Certificate {
+    inner: SecKey<CertificateInner>
+}
+
+#[derive(Serialize, Deserialize)]
+struct CertificateInner {
+    public_key: box_::PublicKey,
+    private_key: box_::SecretKey
+}
+
+impl Debug for CertificateInner {
+    fn fmt(&self, fmt: &mut Formatter<'_>) -> std::fmt::Result {
+        write!(fmt, "<Certificate Hidden>")
+    }
+}
+
+impl Certificate {
+    pub fn new() -> Result<Certificate, CertificateError> {
+        debug!{"Generating new certificate"}
+        let (public_key, private_key) = box_::gen_keypair();
+
+        let inner_cert = CertificateInner{public_key, private_key};
+        let inner = SecKey::new(inner_cert).map_err(|_| CertificateError::SecKey)?;
+
+        Ok(Certificate{inner})
+    }
+
+    pub fn new_from_cbor<T: AsRef<Path>>(path: T) -> Result<Certificate, CertificateError> {
+        debug!{"Reading certificate from {}", path.as_ref().display()}
+        let f = File::open(path)?;
+
+        let inner_cert = serde_cbor::from_reader(BufReader::new(f))?;
+        let inner = SecKey::new(inner_cert).map_err(|_| CertificateError::SecKey)?;
+
+        Ok(Certificate{inner})
+    }
+
+    pub fn open(&self, c: &[u8]) -> Result<Vec<u8>, CertificateError> {
+        let pk = &self.inner.read().public_key;
+        let sk = &self.inner.read().private_key;
+
+        debug!{"Opening sealed box"};
+        sealedbox::open(c, pk, sk)
+            .map_err(|_| CertificateError::Crypto)
+    }
+
+    fn seal(&self, m: &[u8]) -> Vec<u8> {
+        let pk = &self.inner.read().public_key;
+
+        debug!{"Sealing box"}
+        sealedbox::seal(m, pk)
+    }
+}
+
+impl <T: AsRef<Path>> From<T> for Certificate {
+    fn from(path: T) -> Self {
+        Certificate::new_from_cbor(&path)
+            .expect(&format!{"Could not read certificate from {}", path.as_ref().display()})
+    }
+}
diff --git a/coffer-common/src/coffer.rs b/coffer-common/src/coffer.rs
new file mode 100644
index 0000000..a3c92ba
--- /dev/null
+++ b/coffer-common/src/coffer.rs
@@ -0,0 +1,47 @@
+//! A storage container for client data
+
+#[allow(unused_imports)]
+use log::{debug, error, info, trace, warn};
+
+use quick_error::quick_error;
+
+quick_error! {
+    #[derive(Debug)]
+    pub enum CofferError {
+        Coffer
+    }
+}
+
+pub type CofferResult<T> = Result<T, CofferError>;
+
+/// Values supported by a `Coffer`
+pub enum CofferValue {
+    /// A UTF-8 encoded string
+    String(String),
+    /// A 32-bit integer
+    Integer(i32),
+    /// An opaque blob of data
+    Blob(Vec<u8>)
+}
+
+/// A path to a value
+pub struct CofferPath(Vec<String>);
+
+/// Interface for interacting with a `Coffer`
+pub trait Coffer {
+    /// Put `value` at `path`. Errors if there is already a value at `path`.
+    fn put(path: CofferPath, value: CofferValue) -> CofferResult<()>;
+    /// Push `value` to `path`. Replaces existing values silently.
+    fn push(path: CofferPath, value: CofferValue);
+    /// Retrieve `value` at path. Errors if there is no `value` at path.
+    fn get(path: CofferPath) -> CofferResult<CofferValue>;
+}
+
+impl <T> From<&[T]> for CofferPath
+where T: AsRef<str>
+{
+    fn from(val: &[T]) -> Self {
+        let col = val.iter().map(|p| {(*p).as_ref().to_owned()}).collect();
+        CofferPath(col)
+    }
+}
diff --git a/coffer-common/src/lib.rs b/coffer-common/src/lib.rs
new file mode 100644
index 0000000..968ef2c
--- /dev/null
+++ b/coffer-common/src/lib.rs
@@ -0,0 +1,15 @@
+//! Common base for coffer binaries
+
+#[allow(unused_imports)]
+use log::{debug, error, info, trace, warn};
+
+pub mod certificate;
+pub mod coffer;
+
+#[cfg(test)]
+mod tests {
+    #[test]
+    fn it_works() {
+        assert_eq!(2 + 2, 4);
+    }
+}
diff --git a/coffer-server/Cargo.toml b/coffer-server/Cargo.toml
index 9ed64b3..a2f765b 100644
--- a/coffer-server/Cargo.toml
+++ b/coffer-server/Cargo.toml
@@ -6,13 +6,16 @@ edition = "2018"
 
 [dependencies]
 # Base tools
-log = "0.4"
-env_logger="0.7"
-structopt = "0.3"
-quick-error = "1.2"
+log = "^0.4"
+env_logger = "^0.7"
+structopt = "^0.3"
+quick-error = "^1.2"
 # Key management/Cryptography 
-sodiumoxide = "0.2.5"
+sodiumoxide = "^0.2"
 # Communication
-serde = { version = "1.0", features = ["derive"]}
-serde_cbor = "0.10.2"
+tokio = { version="^0.2", features = ["full"]}
+serde = { version = "^1.0", features = ["derive"]}
+serde_cbor = "^0.10.2"
 futures = { version = "0.3.1", features = ["thread-pool"]}
+
+coffer-common = { path = "../coffer-common" }
\ No newline at end of file
diff --git a/coffer-server/src/coffer/coffer.rs b/coffer-server/src/coffer/coffer.rs
new file mode 100644
index 0000000..79a9300
--- /dev/null
+++ b/coffer-server/src/coffer/coffer.rs
@@ -0,0 +1,20 @@
+#[allow(unused_imports)]
+use log::{debug, error, info, trace, warn};
+
+use coffer_common::certificate::Certificate;
+
+pub struct Coffer {
+    certificate: Certificate,
+}
+
+impl Coffer {
+    /// Create a new, empty `Coffer` with a generated certificate
+    pub fn new() -> Coffer {
+        Coffer {certificate: Certificate::new()}
+    }
+
+    /// Create a new `Coffer` with certificate
+    pub fn new_with_certificate (certificate: Certificate) {
+        Coffer {certificate.into()}
+    }
+}
diff --git a/coffer-server/src/coffer/mod.rs b/coffer-server/src/coffer/mod.rs
index 832087c..4b17284 100644
--- a/coffer-server/src/coffer/mod.rs
+++ b/coffer-server/src/coffer/mod.rs
@@ -16,8 +16,7 @@ quick_error! {
     #[derive(Debug)]
     pub enum CofferError {
         Keyring(err: keyring::KeyringError) {
-            from()
-        }
+            from()}
         Io(err: std::io::Error) {
             from()
         }
@@ -33,38 +32,3 @@ quick_error! {
 type Result<T> = std::result::Result<T, CofferError>;
 type Secrets = HashMap<String, String>; // move this to a module if it gathers crust
 
-pub struct Coffer {
-    // do not expose inner structure of coffer
-    keyring: Keyring,
-    secrets: Secrets
-}
-
-impl Coffer {
-    /// Create a coffer from a masterkey and secrets encrypted with the masterkey's
-    /// public key
-    pub fn new_from_path_encrypted(masterkey: &PathBuf, secrets: &PathBuf, keep: bool) -> Result<Coffer> {
-        debug!{"Initializing keyring"}
-        let keyring = Keyring::new_from_path(masterkey)?;
-
-        debug!{"Loading secrets"}
-        let mut sec_data = Vec::new();
-        File::open(secrets)?.read_to_end(&mut sec_data)?;
-
-        debug!{"Removing files"}
-        if !keep {
-            std::fs::remove_file(secrets)?;
-            std::fs::remove_file(masterkey)?;
-        };
-
-        debug!{"Decrypting secrets"}
-        sec_data = keyring.master.decrypt(&sec_data)?;
-        let secrets = serde_cbor::from_slice::<Secrets>(&sec_data)?;
-
-        debug!{"Filling coffer"};
-        Ok(Coffer{keyring, secrets})
-    }
-
-    pub fn get_secret(&self, key: &str) -> Result<&String> {
-        self.secrets.get(key).ok_or("No secret found in coffer for".into())
-    }
-}
diff --git a/coffer-server/src/main.rs b/coffer-server/src/main.rs
index 7dbc9fc..4f0b7f8 100644
--- a/coffer-server/src/main.rs
+++ b/coffer-server/src/main.rs
@@ -4,61 +4,50 @@ use log::{debug, error, info, trace, warn};
 use env_logger;
 
 use std::convert::TryInto;
-use futures::executor::ThreadPool;
 use std::path::PathBuf;
 use structopt::StructOpt;
 use std::net::IpAddr;
 use std::net::SocketAddr;
 use std::sync::Arc;
 
+use tokio::prelude::*;
+
 mod coffer;
+mod server;
 mod comm;
 
 use comm::Channel;
 
 #[derive(StructOpt, Debug)]
 struct Args {
-    /// Path to the master key file. Will be deleted after processing.
-    #[structopt(short, long, parse(from_os_str), env = "SECSRV_MASTER", hide_env_values = true)]
-    master: PathBuf,
+    /// Path to the server certificate. Will be deleted after processing.
+    #[structopt(short, long, parse(from_os_str), env = "COFFER_SERVER_CERTIFICATE", hide_env_values = true)]
+    certificate: Option<PathBuf>,
 
-    /// Path to the secret keys file. Will be deleted after processing.
-    /// Must be encrypted with the public key of the master key
-    #[structopt(short, long, parse(from_os_str), env = "SECSRV_KEYS", hide_env_values = true)]
-    secrets: PathBuf,
+    /// Path to an initial secrets file. Will be deleted after processing.
+    /// Must be sealed by the public key of the server certificate
+    #[structopt(short, long, parse(from_os_str), env = "COFFER_SERVER_SECRETS", hide_env_values = true)]
+    secrets: Option<PathBuf>,
 
-    /// The port secsrv listens on
-    #[structopt(short, long, env = "SECSRV_PORT", default_value = "9187")]
+    /// Port the coffer server listens on
+    #[structopt(short, long, env = "COFFER_SERVER_PORT", default_value = "9187")]
     port: u16,
 
-    /// The address secsrv binds to
-    #[structopt(short, long, env = "SECSRV_IP", default_value = "127.0.0.1")]
-    ip: IpAddr,
-
-    /// Prevent deletion of key files
-    #[structopt(long)]
-    keep_keys: bool
+    /// Address coffer server should bind to
+    #[structopt(short, long, parse(try_from_str), env = "COFFER_SERVER_ADDRESS", default_value = "127.0.0.1:9187")]
+    ip: SocketAddr,
 }
 
-fn main() {
+#[tokio::main]
+async fn main() {
     env_logger::init();
     let args = Args::from_args();
 
     _print_banner();
 
-    info!{"Setting up executor"}
-    let address: SocketAddr = (args.ip, args.port).try_into()
-        .expect("Parsing binding address failed");
-    let executor = ThreadPool::new()
-        .expect("Setting up executor failed");
-
     info!{"Filling coffer"}
-    let coffer = coffer::Coffer::new_from_path_encrypted(&args.master, &args.secrets, args.keep_keys)
+    let coffer = coffer::Coffer::new_from_path_encrypted(&args.master, &args.secrets)
         .expect("Could not fill coffer");
-
-    debug!{"Connecting on {}", address}
-    let channel = Channel {executor, address, coffer: Arc::from(coffer)};
-    channel.listen();
 }
 
 fn _print_banner() {
diff --git a/coffer-server/src/server/mod.rs b/coffer-server/src/server/mod.rs
new file mode 100644
index 0000000..0a2d0bc
--- /dev/null
+++ b/coffer-server/src/server/mod.rs
@@ -0,0 +1,11 @@
+//! Public APIs for `coffer-server`
+
+use std::net::ToSocketAddrs;
+
+use tokio::prelude::*;
+use tokio::net::TcpListener;
+
+async fn run_server<T: ToSocketAddrs>(sock_addrs: T) {
+    let addr = sock_addrs.to_socket_addrs().unwrap().next().unwrap();
+    let listener = TcpListener::bind(addr);
+}