wip rearrange bouncer key a bit

Author: gnprice

lib/model/push_device.dart

@@ -202,7 +202,6 @@ class PushDeviceManager extends PerAccountStoreBase {
       _ => throw StateError('unexpected platform: $defaultTargetPlatform'),
     };
 
-    final bouncerPublicKey = 'nonsense-bouncer-key'; // TODO(#1764) fill in
     final pushRegistration = PushRegistration(
       tokenKind: tokenKind, token: token,
       timestamp: timestamp);
@@ -212,8 +211,8 @@ class PushDeviceManager extends PerAccountStoreBase {
         tokenKind: tokenKind,
         pushAccountId: pushAccountId,
         pushPublicKey: base64Encode(pushKey),
-        bouncerPublicKey: bouncerPublicKey,
-        encryptedPushRegistration: _encryptToBouncer(bouncerPublicKey,
+        bouncerPublicKey: _bouncerPublicKey,
+        encryptedPushRegistration: _encryptToBouncer(_bouncerPublicKey,
           jsonEncode(pushRegistration)),
       );
     } finally {
@@ -226,8 +225,10 @@ class PushDeviceManager extends PerAccountStoreBase {
     //   and show warning if not confirmed there
   }
 
+  static const _bouncerPublicKey = 'nonsense-bouncer-key'; // TODO(#1764) fill in
+
   static String _encryptToBouncer(String publicKey, String plaintext) {
-    return 'SEKRIT don\'t peek: $plaintext END-SEKRIT'; // TODO(#1764)
+    return 'SEKRIT nobody peek except $publicKey BODY $plaintext END-SEKRIT'; // TODO(#1764)
   }
 
   Future<void> _legacyRegisterToken(String token) async {