> however the OAuth token should not be in clear text. How would you suggest to store it in a way that prevents someone with root access to the phone from read

> however the OAuth token should not be in clear text. How would you suggest to store it in a way that prevents someone with root access to the phone from reading it? Any encryption keys stored by the application would surely be just as easily readable by root, right?