Ask HN: How are you storing OAuth access keys and secrets?

During a regular OAuth dance, you receive and save users OAuth access keys and secrets. Each time you need to act on behalf of the user you'll retrieve an access key and secret.

Question is: how do you store this information and prevent an attacker from getting access to it?