Ship the model. Keep the secrets.

using LMKit.Model;

// Build-time: encrypt the GGUF artefact you ship.
EncryptedGguf.Encrypt(
    sourcePath:    @"D:\models\support-tone-finetune.gguf",
    encryptedPath: @"D:\dist\support-tone-finetune.lmk-enc",
    password:      SecretsVault.GetReleasePassword());

// The .lmk-enc file is what your installer ships. The plaintext .gguf
// stays on the build server.

// Runtime: load straight from the encrypted file. No intermediate plaintext.
var model = LM.LoadEncrypted(
    path:     @"C:\Program Files\YourApp\models\support-tone-finetune.lmk-enc",
    password: keyService.ResolveModelKey("support-tone"));

// From here, the model behaves exactly like any other LM.
var chat = new MultiTurnConversation(model);
var reply = await chat.SubmitAsync("How do I escalate this ticket?");

// Production pattern: keys come from a licensing or secrets service,
// never from disk, never embedded in the binary.
async Task<LM> LoadModelForTenantAsync(string tenantId, string modelId)
{
    var entitlement = await _licenseClient.CheckEntitlementAsync(tenantId, modelId);
    if (!entitlement.IsValid) throw new UnauthorizedAccessException();

    var password = await _keyVault.GetModelKeyAsync(modelId, entitlement.SessionToken);
    return LM.LoadEncrypted(_modelStorage.GetPath(modelId), password);
}